@capgo/capacitor-social-login 8.2.7 → 8.2.8

package/android/src/main/java/ee/forgr/capacitor/social/login/SocialLoginPlugin.java

@@ -18,7 +18,7 @@ import org.json.JSONObject;
 @CapacitorPlugin(name = "SocialLogin")
 public class SocialLoginPlugin extends Plugin {
 
-    private final String pluginVersion = "8.2.7";
+    private final String pluginVersion = "8.2.8";
 
     public static String LOG_TAG = "CapgoSocialLogin";
 

package/dist/esm/google-provider.js

@@ -304,77 +304,124 @@ export class GoogleSocialLogin extends BaseSocialLogin {
         const popup = window.open(url, 'Google Sign In', `width=${width},height=${height},left=${left},top=${top},popup=1`);
         let popupClosedInterval;
         let timeoutHandle;
+        // Use BroadcastChannel for cross-origin communication (works when postMessage doesn't)
+        const channelName = `google_oauth_${nonce || Date.now()}`;
+        let broadcastChannel = null;
+        try {
+            broadcastChannel = new BroadcastChannel(channelName);
+        }
+        catch (_b) {
+            // BroadcastChannel not supported, fall back to postMessage only
+        }
         // This may never return...
         return new Promise((resolve, reject) => {
             if (!popup) {
                 reject(new Error('Failed to open popup'));
                 return;
             }
-            const handleMessage = (event) => {
-                var _a, _b, _c, _d;
-                if (event.origin !== window.location.origin || ((_b = (_a = event.data) === null || _a === void 0 ? void 0 : _a.source) === null || _b === void 0 ? void 0 : _b.startsWith('angular')))
-                    return;
-                if (((_c = event.data) === null || _c === void 0 ? void 0 : _c.type) === 'oauth-response') {
-                    window.removeEventListener('message', handleMessage);
-                    clearInterval(popupClosedInterval);
-                    clearTimeout(timeoutHandle);
-                    if (this.loginType === 'online') {
-                        const { accessToken, idToken } = event.data;
-                        if (accessToken && idToken) {
-                            const profile = this.parseJwt(idToken);
-                            this.persistStateGoogle(accessToken.token, idToken);
-                            resolve({
-                                provider: 'google',
-                                result: {
-                                    accessToken: {
-                                        token: accessToken.token,
-                                    },
-                                    idToken,
-                                    profile: {
-                                        email: profile.email || null,
-                                        familyName: profile.family_name || null,
-                                        givenName: profile.given_name || null,
-                                        id: profile.sub || null,
-                                        name: profile.name || null,
-                                        imageUrl: profile.picture || null,
-                                    },
-                                    responseType: 'online',
-                                },
-                            });
-                        }
-                    }
-                    else {
-                        const { serverAuthCode } = event.data;
+            const cleanup = () => {
+                window.removeEventListener('message', handleMessage);
+                clearInterval(popupClosedInterval);
+                clearTimeout(timeoutHandle);
+                if (broadcastChannel) {
+                    broadcastChannel.close();
+                }
+            };
+            const processOAuthResponse = (data) => {
+                if (this.loginType === 'online') {
+                    const { accessToken, idToken } = data;
+                    if (accessToken && idToken) {
+                        const profile = this.parseJwt(idToken);
+                        this.persistStateGoogle(accessToken.token, idToken);
                         resolve({
                             provider: 'google',
                             result: {
-                                responseType: 'offline',
-                                serverAuthCode,
+                                accessToken: {
+                                    token: accessToken.token,
+                                },
+                                idToken,
+                                profile: {
+                                    email: profile.email || null,
+                                    familyName: profile.family_name || null,
+                                    givenName: profile.given_name || null,
+                                    id: profile.sub || null,
+                                    name: profile.name || null,
+                                    imageUrl: profile.picture || null,
+                                },
+                                responseType: 'online',
                             },
                         });
                     }
                 }
+                else {
+                    const { serverAuthCode } = data;
+                    resolve({
+                        provider: 'google',
+                        result: {
+                            responseType: 'offline',
+                            serverAuthCode,
+                        },
+                    });
+                }
+            };
+            const handleMessage = (event) => {
+                var _a, _b, _c, _d;
+                if (event.origin !== window.location.origin || ((_b = (_a = event.data) === null || _a === void 0 ? void 0 : _a.source) === null || _b === void 0 ? void 0 : _b.startsWith('angular')))
+                    return;
+                if (((_c = event.data) === null || _c === void 0 ? void 0 : _c.type) === 'oauth-response') {
+                    cleanup();
+                    processOAuthResponse(event.data);
+                }
                 else if (((_d = event.data) === null || _d === void 0 ? void 0 : _d.type) === 'oauth-error') {
-                    window.removeEventListener('message', handleMessage);
-                    clearInterval(popupClosedInterval);
-                    clearTimeout(timeoutHandle);
+                    cleanup();
                     const errorMessage = event.data.error || 'User cancelled the OAuth flow';
                     reject(new Error(errorMessage));
                 }
                 // Don't reject for non-OAuth messages, just ignore them
             };
+            // Listen for BroadcastChannel messages
+            if (broadcastChannel) {
+                broadcastChannel.onmessage = (event) => {
+                    var _a;
+                    const data = event.data;
+                    if ((_a = data === null || data === void 0 ? void 0 : data.source) === null || _a === void 0 ? void 0 : _a.toString().startsWith('angular'))
+                        return;
+                    if ((data === null || data === void 0 ? void 0 : data.type) === 'oauth-response') {
+                        cleanup();
+                        processOAuthResponse(data);
+                    }
+                    else if ((data === null || data === void 0 ? void 0 : data.type) === 'oauth-error') {
+                        cleanup();
+                        const errorMessage = data.error || 'User cancelled the OAuth flow';
+                        reject(new Error(errorMessage));
+                    }
+                };
+            }
             window.addEventListener('message', handleMessage);
             // Timeout after 5 minutes
             timeoutHandle = setTimeout(() => {
-                clearTimeout(timeoutHandle);
-                window.removeEventListener('message', handleMessage);
-                popup.close();
+                cleanup();
+                try {
+                    popup.close();
+                }
+                catch (_a) {
+                    // Ignore cross-origin errors when closing
+                }
                 reject(new Error('OAuth timeout'));
             }, 300000);
             popupClosedInterval = setInterval(() => {
-                if (popup.closed) {
+                try {
+                    // Check if popup is closed - this may throw cross-origin errors for some providers
+                    if (popup.closed) {
+                        cleanup();
+                        reject(new Error('Popup closed'));
+                    }
+                }
+                catch (_a) {
+                    // Cross-origin error when checking popup.closed - this happens when the popup
+                    // navigates to a third-party OAuth provider with strict security settings.
+                    // We can't detect if the window was closed, so we rely on timeout and message handlers.
                     clearInterval(popupClosedInterval);
-                    reject(new Error('Popup closed'));
                 }
             }, 1000);
         });

package/dist/esm/google-provider.js.map

@@ -1 +1 @@
-{"version":3,"file":"google-provider.js","sourceRoot":"","sources":["../../src/google-provider.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,QAAQ,CAAC;AAGzC,MAAM,OAAO,iBAAkB,SAAQ,eAAe;IAAtD;;QACU,aAAQ,GAAkB,IAAI,CAAC;QAE/B,cAAS,GAAyB,QAAQ,CAAC;QAE3C,6BAAwB,GAAG,gDAAgD,CAAC;QACnE,qBAAgB,GAAG,iCAAiC,CAAC;IAobxE,CAAC;IAlbC,KAAK,CAAC,UAAU,CACd,QAAuB,EACvB,IAA2B,EAC3B,YAA4B,EAC5B,WAAoB;QAEpB,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,IAAI,EAAE,CAAC;YACT,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QACxB,CAAC;QACD,IAAI,CAAC,YAAY,GAAG,YAAkC,CAAC;QACvD,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;IACjC,CAAC;IAED,KAAK,CAAC,KAAK,CACT,OAA2B;QAE3B,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;QACxE,CAAC;QAED,IAAI,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC;QAElC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtB,kEAAkE;YAClE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,gDAAgD,CAAC,EAAE,CAAC;gBACvE,MAAM,CAAC,IAAI,CAAC,gDAAgD,CAAC,CAAC;YAChE,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,kDAAkD,CAAC,EAAE,CAAC;gBACzE,MAAM,CAAC,IAAI,CAAC,kDAAkD,CAAC,CAAC;YAClE,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC/B,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACxB,CAAC;QACH,CAAC;aAAM,CAAC;YACN,MAAM,GAAG;gBACP,gDAAgD;gBAChD,kDAAkD;gBAClD,QAAQ;aACT,CAAC;QACJ,CAAC;QAED,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QAEvE,kEAAkE;QAClE,OAAO,IAAI,CAAC,gBAAgB,CAAC;YAC3B,MAAM;YACN,KAAK;YACL,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,MAAM,EAAE,OAAO,CAAC,MAAM;SACvB,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,MAAM;QACV,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACjC,OAAO,OAAO,CAAC,MAAM,CAAC,6DAA6D,CAAC,CAAC;QACvF,CAAC;QACD,2BAA2B;QAC3B,MAAM,KAAK,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;QACpC,IAAI,CAAC,KAAK;YAAE,OAAO;QACnB,MAAM,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAChD,CAAC;IAED,KAAK,CAAC,UAAU;QACd,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACjC,OAAO,OAAO,CAAC,MAAM,CAAC,iEAAiE,CAAC,CAAC;QAC3F,CAAC;QACD,2BAA2B;QAC3B,MAAM,KAAK,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;QACpC,IAAI,CAAC,KAAK;YAAE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;QAEzC,IAAI,CAAC;YACH,MAAM,kBAAkB,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;YAC5E,MAAM,cAAc,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACxD,IAAI,kBAAkB,IAAI,cAAc,EAAE,CAAC;gBACzC,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;YAC9B,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC;oBACH,MAAM,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;gBACvD,CAAC;gBAAC,OAAO,CAAC,EAAE,CAAC;oBACX,OAAO,CAAC,KAAK,CAAC,8CAA8C,EAAE,CAAC,CAAC,CAAC;gBACnE,CAAC;gBACD,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;YAC/B,CAAC;QACH,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC;IAED,KAAK,CAAC,oBAAoB;QACxB,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACjC,OAAO,OAAO,CAAC,MAAM,CAAC,2EAA2E,CAAC,CAAC;QACrG,CAAC;QACD,2BAA2B;QAC3B,MAAM,KAAK,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;QACpC,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QAEtE,IAAI,CAAC;YACH,MAAM,kBAAkB,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;YAC5E,MAAM,cAAc,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACxD,IAAI,kBAAkB,IAAI,cAAc,EAAE,CAAC;gBACzC,OAAO,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,GAAG,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;YAChE,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC;oBACH,MAAM,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;gBACvD,CAAC;gBAAC,OAAO,CAAC,EAAE,CAAC;oBACX,OAAO,CAAC,KAAK,CAAC,8CAA8C,EAAE,CAAC,CAAC,CAAC;gBACnE,CAAC;gBACD,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;YAC5D,CAAC;QACH,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC;IAED,KAAK,CAAC,OAAO;QACX,kDAAkD;QAClD,OAAO,OAAO,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;IAC3C,CAAC;IAED,mBAAmB,CAAC,GAAQ;QAC1B,MAAM,SAAS,GAAG,GAAG,CAAC,YAAY,CAAC;QAEnC,6DAA6D;QAC7D,MAAM,aAAa,GAAG,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC7C,IAAI,aAAa,EAAE,CAAC;YAClB,YAAY,CAAC,UAAU,CAAC,eAAe,CAAC,eAAe,CAAC,CAAC;YACzD,MAAM,gBAAgB,GAAG,SAAS,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,aAAa,CAAC;YAC7E,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC;QACrC,CAAC;QAED,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAEnC,IAAI,IAAI,IAAI,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YACnC,OAAO;gBACL,QAAQ,EAAE,QAAQ;gBAClB,MAAM,EAAE;oBACN,cAAc,EAAE,IAAI;oBACpB,YAAY,EAAE,SAAS;iBACxB;aACF,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QACnC,OAAO,CAAC,GAAG,CAAC,qBAAqB,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QAE7C,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC;QAEvB,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC;QAEzC,uDAAuD;QACvD,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAClC,IAAI,KAAK,EAAE,CAAC;YACV,YAAY,CAAC,UAAU,CAAC,eAAe,CAAC,eAAe,CAAC,CAAC;YACzD,MAAM,gBAAgB,GAAG,MAAM,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,KAAK,CAAC;YAClE,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC;QACrC,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;QAEtC,MAAM,WAAW,GAAG,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QAC/C,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAEvC,IAAI,WAAW,IAAI,OAAO,EAAE,CAAC;YAC3B,YAAY,CAAC,UAAU,CAAC,eAAe,CAAC,eAAe,CAAC,CAAC;YACzD,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YACvC,OAAO;gBACL,QAAQ,EAAE,QAAQ;gBAClB,MAAM,EAAE;oBACN,WAAW,EAAE;wBACX,KAAK,EAAE,WAAW;qBACnB;oBACD,OAAO;oBACP,OAAO,EAAE;wBACP,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,IAAI;wBAC5B,UAAU,EAAE,OAAO,CAAC,WAAW,IAAI,IAAI;wBACvC,SAAS,EAAE,OAAO,CAAC,UAAU,IAAI,IAAI;wBACrC,EAAE,EAAE,OAAO,CAAC,GAAG,IAAI,IAAI;wBACvB,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,IAAI;wBAC1B,QAAQ,EAAE,OAAO,CAAC,OAAO,IAAI,IAAI;qBAClC;oBACD,YAAY,EAAE,QAAQ;iBACvB;aACF,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,KAAK,CAAC,kBAAkB,CAAC,WAAmB;QAClD,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,wBAAwB,iBAAiB,kBAAkB,CAAC,WAAW,CAAC,EAAE,CAAC;QAE/F,IAAI,CAAC;YACH,mCAAmC;YACnC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;YAElC,sCAAsC;YACtC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,OAAO,CAAC,GAAG,CACT,yBAAyB,IAAI,CAAC,wBAAwB,2CAA2C,QAAQ,CAAC,MAAM,wCAAwC,CACzJ,CAAC;gBACF,OAAO,KAAK,CAAC;YACf,CAAC;YAED,gCAAgC;YAChC,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YAE3C,IAAI,CAAC,YAAY,EAAE,CAAC;gBAClB,OAAO,CAAC,KAAK,CAAC,yBAAyB,IAAI,CAAC,wBAAwB,yBAAyB,CAAC,CAAC;gBAC/F,MAAM,IAAI,KAAK,CAAC,yBAAyB,IAAI,CAAC,wBAAwB,yBAAyB,CAAC,CAAC;YACnG,CAAC;YAED,kCAAkC;YAClC,IAAI,UAAe,CAAC;YACpB,IAAI,CAAC;gBACH,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;YACxC,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,OAAO,CAAC,KAAK,CACX,yBAAyB,IAAI,CAAC,wBAAwB,6CAA6C,CAAC,EAAE,CACvG,CAAC;gBACF,MAAM,IAAI,KAAK,CACb,yBAAyB,IAAI,CAAC,wBAAwB,6CAA6C,CAAC,EAAE,CACvG,CAAC;YACJ,CAAC;YAED,iCAAiC;YACjC,MAAM,YAAY,GAAG,UAAU,CAAC,YAAY,CAAC,CAAC;YAE9C,IAAI,YAAY,KAAK,SAAS,IAAI,YAAY,KAAK,IAAI,EAAE,CAAC;gBACxD,OAAO,CAAC,KAAK,CACX,yBAAyB,IAAI,CAAC,wBAAwB,gDAAgD,CACvG,CAAC;gBACF,MAAM,IAAI,KAAK,CACb,yBAAyB,IAAI,CAAC,wBAAwB,gDAAgD,CACvG,CAAC;YACJ,CAAC;YAED,mCAAmC;YACnC,IAAI,YAAoB,CAAC;YACzB,IAAI,CAAC;gBACH,YAAY,GAAG,QAAQ,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;gBAC1C,IAAI,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC;oBACxB,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;gBACzD,CAAC;YACH,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,OAAO,CAAC,KAAK,CACX,yBAAyB,IAAI,CAAC,wBAAwB,mBAAmB,YAAY,mCAAmC,CAAC,EAAE,CAC5H,CAAC;gBACF,MAAM,IAAI,KAAK,CACb,yBAAyB,IAAI,CAAC,wBAAwB,mBAAmB,YAAY,mCAAmC,CAAC,EAAE,CAC5H,CAAC;YACJ,CAAC;YAED,+DAA+D;YAC/D,OAAO,YAAY,GAAG,CAAC,CAAC;QAC1B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACrB,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAEO,YAAY,CAAC,OAAe;QAClC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YACtC,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,8CAA8C;YACpG,OAAO,MAAM,CAAC,GAAG,IAAI,WAAW,GAAG,MAAM,CAAC,GAAG,CAAC;QAChD,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,eAAe,CAAC,WAAmB,EAAE,aAA6B,IAAI;QAClF,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;YACxB,UAAU,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,WAAW,CAAC,CAAC;QAC1D,CAAC;QAED,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;YACxB,IAAI,CAAC;gBACH,MAAM,KAAK,CAAC,qDAAqD,kBAAkB,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;gBACpG,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC1B,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,SAAS;YACX,CAAC;YACD,OAAO;QACT,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACxB,OAAO;QACT,CAAC;IACH,CAAC;IAEO,kBAAkB,CAAC,WAAmB,EAAE,OAAe;QAC7D,IAAI,CAAC;YACH,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,gBAAgB,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;QAC/F,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,CAAC,KAAK,CAAC,6BAA6B,EAAE,CAAC,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;IAEO,gBAAgB;QACtB,IAAI,CAAC;YACH,MAAM,CAAC,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QACxD,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,CAAC,KAAK,CAAC,2BAA2B,EAAE,CAAC,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;IAEO,cAAc;QACpB,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;YACjE,IAAI,CAAC,KAAK;gBAAE,OAAO,IAAI,CAAC;YACxB,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACnD,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC;QAClC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,CAAC,KAAK,CAAC,yBAAyB,EAAE,CAAC,CAAC,CAAC;YAC5C,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAAqB,EACjD,MAAM,EACN,YAAY,EACZ,KAAK,EACL,MAAM,GACyC;;QAC/C,MAAM,YAAY,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC;QAEjE,MAAM,MAAM,GAAG,IAAI,eAAe,+BAChC,SAAS,EAAE,MAAA,IAAI,CAAC,QAAQ,mCAAI,EAAE,EAC9B,YAAY,EAAE,IAAI,CAAC,WAAW,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,EACnF,aAAa,EAAE,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,gBAAgB,EACvE,KAAK,EAAE,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,IAC1B,CAAC,KAAK,IAAI,EAAE,KAAK,EAAE,CAAC,KACvB,sBAAsB,EAAE,MAAM,EAC9B,KAAK,EAAE,OAAO,IACd,CAAC;QACH,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;YAC/B,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;QACpC,CAAC;QACD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAClC,CAAC;QAED,MAAM,GAAG,GAAG,gDAAgD,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;QAChF,MAAM,KAAK,GAAG,GAAG,CAAC;QAClB,MAAM,MAAM,GAAG,GAAG,CAAC;QACnB,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,GAAG,CAAC,MAAM,CAAC,UAAU,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;QAC9D,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,GAAG,CAAC,MAAM,CAAC,WAAW,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QAC/D,YAAY,CAAC,OAAO,CAClB,eAAe,CAAC,eAAe,EAC/B,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAClE,CAAC;QACF,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,gBAAgB,EAAE,SAAS,KAAK,WAAW,MAAM,SAAS,IAAI,QAAQ,GAAG,UAAU,CAAC,CAAC;QAEpH,IAAI,mBAA2B,CAAC;QAChC,IAAI,aAAqB,CAAC;QAE1B,2BAA2B;QAC3B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,MAAM,CAAC,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAAC;gBAC1C,OAAO;YACT,CAAC;YAED,MAAM,aAAa,GAAG,CAAC,KAAmB,EAAE,EAAE;;gBAC5C,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAI,MAAA,MAAA,KAAK,CAAC,IAAI,0CAAE,MAAM,0CAAE,UAAU,CAAC,SAAS,CAAC,CAAA;oBAAE,OAAO;gBAEjG,IAAI,CAAA,MAAA,KAAK,CAAC,IAAI,0CAAE,IAAI,MAAK,gBAAgB,EAAE,CAAC;oBAC1C,MAAM,CAAC,mBAAmB,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;oBACrD,aAAa,CAAC,mBAAmB,CAAC,CAAC;oBACnC,YAAY,CAAC,aAAa,CAAC,CAAC;oBAE5B,IAAI,IAAI,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;wBAChC,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC;wBAC5C,IAAI,WAAW,IAAI,OAAO,EAAE,CAAC;4BAC3B,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;4BACvC,IAAI,CAAC,kBAAkB,CAAC,WAAW,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;4BACpD,OAAO,CAAC;gCACN,QAAQ,EAAE,QAAa;gCACvB,MAAM,EAAE;oCACN,WAAW,EAAE;wCACX,KAAK,EAAE,WAAW,CAAC,KAAK;qCACzB;oCACD,OAAO;oCACP,OAAO,EAAE;wCACP,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,IAAI;wCAC5B,UAAU,EAAE,OAAO,CAAC,WAAW,IAAI,IAAI;wCACvC,SAAS,EAAE,OAAO,CAAC,UAAU,IAAI,IAAI;wCACrC,EAAE,EAAE,OAAO,CAAC,GAAG,IAAI,IAAI;wCACvB,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,IAAI;wCAC1B,QAAQ,EAAE,OAAO,CAAC,OAAO,IAAI,IAAI;qCAClC;oCACD,YAAY,EAAE,QAAQ;iCACvB;6BACF,CAAC,CAAC;wBACL,CAAC;oBACH,CAAC;yBAAM,CAAC;wBACN,MAAM,EAAE,cAAc,EAAE,GAAG,KAAK,CAAC,IAEhC,CAAC;wBACF,OAAO,CAAC;4BACN,QAAQ,EAAE,QAAa;4BACvB,MAAM,EAAE;gCACN,YAAY,EAAE,SAAS;gCACvB,cAAc;6BACf;yBACF,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;qBAAM,IAAI,CAAA,MAAA,KAAK,CAAC,IAAI,0CAAE,IAAI,MAAK,aAAa,EAAE,CAAC;oBAC9C,MAAM,CAAC,mBAAmB,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;oBACrD,aAAa,CAAC,mBAAmB,CAAC,CAAC;oBACnC,YAAY,CAAC,aAAa,CAAC,CAAC;oBAC5B,MAAM,YAAY,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,+BAA+B,CAAC;oBACzE,MAAM,CAAC,IAAI,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC;gBAClC,CAAC;gBACD,wDAAwD;YAC1D,CAAC,CAAC;YAEF,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;YAElD,0BAA0B;YAC1B,aAAa,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC9B,YAAY,CAAC,aAAa,CAAC,CAAC;gBAC5B,MAAM,CAAC,mBAAmB,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;gBACrD,KAAK,CAAC,KAAK,EAAE,CAAC;gBACd,MAAM,CAAC,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC;YACrC,CAAC,EAAE,MAAM,CAAC,CAAC;YAEX,mBAAmB,GAAG,WAAW,CAAC,GAAG,EAAE;gBACrC,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;oBACjB,aAAa,CAAC,mBAAmB,CAAC,CAAC;oBACnC,MAAM,CAAC,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC;gBACpC,CAAC;YACH,CAAC,EAAE,IAAI,CAAC,CAAC;QACX,CAAC,CAAC,CAAC;IACL,CAAC;CACF","sourcesContent":["import { BaseSocialLogin } from './base';\nimport type { GoogleLoginOptions, LoginResult, ProviderResponseMap, AuthorizationCode } from './definitions';\n\nexport class GoogleSocialLogin extends BaseSocialLogin {\n  private clientId: string | null = null;\n  private hostedDomain?: string;\n  private loginType: 'online' | 'offline' = 'online';\n  private redirectUrl?: string;\n  private GOOGLE_TOKEN_REQUEST_URL = 'https://www.googleapis.com/oauth2/v3/tokeninfo';\n  private readonly GOOGLE_STATE_KEY = 'capgo_social_login_google_state';\n\n  async initialize(\n    clientId: string | null,\n    mode?: 'online' | 'offline',\n    hostedDomain?: string | null,\n    redirectUrl?: string,\n  ): Promise<void> {\n    this.clientId = clientId;\n    if (mode) {\n      this.loginType = mode;\n    }\n    this.hostedDomain = hostedDomain as string | undefined;\n    this.redirectUrl = redirectUrl;\n  }\n\n  async login<T extends 'google'>(\n    options: GoogleLoginOptions,\n  ): Promise<{ provider: T; result: ProviderResponseMap[T] }> {\n    if (!this.clientId) {\n      throw new Error('Google Client ID not set. Call initialize() first.');\n    }\n\n    let scopes = options.scopes || [];\n\n    if (scopes.length > 0) {\n      // If scopes are provided, directly use the traditional OAuth flow\n      if (!scopes.includes('https://www.googleapis.com/auth/userinfo.email')) {\n        scopes.push('https://www.googleapis.com/auth/userinfo.email');\n      }\n      if (!scopes.includes('https://www.googleapis.com/auth/userinfo.profile')) {\n        scopes.push('https://www.googleapis.com/auth/userinfo.profile');\n      }\n      if (!scopes.includes('openid')) {\n        scopes.push('openid');\n      }\n    } else {\n      scopes = [\n        'https://www.googleapis.com/auth/userinfo.email',\n        'https://www.googleapis.com/auth/userinfo.profile',\n        'openid',\n      ];\n    }\n\n    const nonce = options.nonce || Math.random().toString(36).substring(2);\n\n    // If scopes are provided, directly use the traditional OAuth flow\n    return this.traditionalOAuth({\n      scopes,\n      nonce,\n      hostedDomain: this.hostedDomain,\n      prompt: options.prompt,\n    });\n  }\n\n  async logout(): Promise<void> {\n    if (this.loginType === 'offline') {\n      return Promise.reject(\"Offline login doesn't store tokens. logout is not available\");\n    }\n    // eslint-disable-next-line\n    const state = this.getGoogleState();\n    if (!state) return;\n    await this.rawLogoutGoogle(state.accessToken);\n  }\n\n  async isLoggedIn(): Promise<{ isLoggedIn: boolean }> {\n    if (this.loginType === 'offline') {\n      return Promise.reject(\"Offline login doesn't store tokens. isLoggedIn is not available\");\n    }\n    // eslint-disable-next-line\n    const state = this.getGoogleState();\n    if (!state) return { isLoggedIn: false };\n\n    try {\n      const isValidAccessToken = await this.accessTokenIsValid(state.accessToken);\n      const isValidIdToken = this.idTokenValid(state.idToken);\n      if (isValidAccessToken && isValidIdToken) {\n        return { isLoggedIn: true };\n      } else {\n        try {\n          await this.rawLogoutGoogle(state.accessToken, false);\n        } catch (e) {\n          console.error('Access token is not valid, but cannot logout', e);\n        }\n        return { isLoggedIn: false };\n      }\n    } catch (e) {\n      return Promise.reject(e);\n    }\n  }\n\n  async getAuthorizationCode(): Promise<AuthorizationCode> {\n    if (this.loginType === 'offline') {\n      return Promise.reject(\"Offline login doesn't store tokens. getAuthorizationCode is not available\");\n    }\n    // eslint-disable-next-line\n    const state = this.getGoogleState();\n    if (!state) throw new Error('No Google authorization code available');\n\n    try {\n      const isValidAccessToken = await this.accessTokenIsValid(state.accessToken);\n      const isValidIdToken = this.idTokenValid(state.idToken);\n      if (isValidAccessToken && isValidIdToken) {\n        return { accessToken: state.accessToken, jwt: state.idToken };\n      } else {\n        try {\n          await this.rawLogoutGoogle(state.accessToken, false);\n        } catch (e) {\n          console.error('Access token is not valid, but cannot logout', e);\n        }\n        throw new Error('No Google authorization code available');\n      }\n    } catch (e) {\n      return Promise.reject(e);\n    }\n  }\n\n  async refresh(): Promise<void> {\n    // For Google, we can prompt for re-authentication\n    return Promise.reject('Not implemented');\n  }\n\n  handleOAuthRedirect(url: URL): LoginResult | { error: string } | null {\n    const paramsRaw = url.searchParams;\n\n    // Check for errors in search params first (for offline mode)\n    const errorInParams = paramsRaw.get('error');\n    if (errorInParams) {\n      localStorage.removeItem(BaseSocialLogin.OAUTH_STATE_KEY);\n      const errorDescription = paramsRaw.get('error_description') || errorInParams;\n      return { error: errorDescription };\n    }\n\n    const code = paramsRaw.get('code');\n\n    if (code && paramsRaw.has('scope')) {\n      return {\n        provider: 'google',\n        result: {\n          serverAuthCode: code,\n          responseType: 'offline',\n        },\n      };\n    }\n\n    const hash = url.hash.substring(1);\n    console.log('handleOAuthRedirect', url.hash);\n\n    if (!hash) return null;\n\n    const params = new URLSearchParams(hash);\n\n    // Check for error cases in hash (e.g., user cancelled)\n    const error = params.get('error');\n    if (error) {\n      localStorage.removeItem(BaseSocialLogin.OAUTH_STATE_KEY);\n      const errorDescription = params.get('error_description') || error;\n      return { error: errorDescription };\n    }\n\n    console.log('handleOAuthRedirect ok');\n\n    const accessToken = params.get('access_token');\n    const idToken = params.get('id_token');\n\n    if (accessToken && idToken) {\n      localStorage.removeItem(BaseSocialLogin.OAUTH_STATE_KEY);\n      const profile = this.parseJwt(idToken);\n      return {\n        provider: 'google',\n        result: {\n          accessToken: {\n            token: accessToken,\n          },\n          idToken,\n          profile: {\n            email: profile.email || null,\n            familyName: profile.family_name || null,\n            givenName: profile.given_name || null,\n            id: profile.sub || null,\n            name: profile.name || null,\n            imageUrl: profile.picture || null,\n          },\n          responseType: 'online',\n        },\n      };\n    }\n    return null;\n  }\n\n  private async accessTokenIsValid(accessToken: string): Promise<boolean> {\n    const url = `${this.GOOGLE_TOKEN_REQUEST_URL}?access_token=${encodeURIComponent(accessToken)}`;\n\n    try {\n      // Make the GET request using fetch\n      const response = await fetch(url);\n\n      // Check if the response is successful\n      if (!response.ok) {\n        console.log(\n          `Invalid response from ${this.GOOGLE_TOKEN_REQUEST_URL}. Response not successful. Status code: ${response.status}. Assuming that the token is not valid`,\n        );\n        return false;\n      }\n\n      // Get the response body as text\n      const responseBody = await response.text();\n\n      if (!responseBody) {\n        console.error(`Invalid response from ${this.GOOGLE_TOKEN_REQUEST_URL}. Response body is null`);\n        throw new Error(`Invalid response from ${this.GOOGLE_TOKEN_REQUEST_URL}. Response body is null`);\n      }\n\n      // Parse the response body as JSON\n      let jsonObject: any;\n      try {\n        jsonObject = JSON.parse(responseBody);\n      } catch (e) {\n        console.error(\n          `Invalid response from ${this.GOOGLE_TOKEN_REQUEST_URL}. Response body is not valid JSON. Error: ${e}`,\n        );\n        throw new Error(\n          `Invalid response from ${this.GOOGLE_TOKEN_REQUEST_URL}. Response body is not valid JSON. Error: ${e}`,\n        );\n      }\n\n      // Extract the 'expires_in' field\n      const expiresInStr = jsonObject['expires_in'];\n\n      if (expiresInStr === undefined || expiresInStr === null) {\n        console.error(\n          `Invalid response from ${this.GOOGLE_TOKEN_REQUEST_URL}. Response JSON does not include 'expires_in'.`,\n        );\n        throw new Error(\n          `Invalid response from ${this.GOOGLE_TOKEN_REQUEST_URL}. Response JSON does not include 'expires_in'.`,\n        );\n      }\n\n      // Parse 'expires_in' as an integer\n      let expiresInInt: number;\n      try {\n        expiresInInt = parseInt(expiresInStr, 10);\n        if (isNaN(expiresInInt)) {\n          throw new Error(`'expires_in' is not a valid integer`);\n        }\n      } catch (e) {\n        console.error(\n          `Invalid response from ${this.GOOGLE_TOKEN_REQUEST_URL}. 'expires_in': ${expiresInStr} is not a valid integer. Error: ${e}`,\n        );\n        throw new Error(\n          `Invalid response from ${this.GOOGLE_TOKEN_REQUEST_URL}. 'expires_in': ${expiresInStr} is not a valid integer. Error: ${e}`,\n        );\n      }\n\n      // Determine if the access token is valid based on 'expires_in'\n      return expiresInInt > 5;\n    } catch (error) {\n      console.error(error);\n      throw error;\n    }\n  }\n\n  private idTokenValid(idToken: string): boolean {\n    try {\n      const parsed = this.parseJwt(idToken);\n      const currentTime = Math.ceil(Date.now() / 1000) + 5; // Convert current time to seconds since epoch\n      return parsed.exp && currentTime < parsed.exp;\n    } catch (e) {\n      return false;\n    }\n  }\n\n  private async rawLogoutGoogle(accessToken: string, tokenValid: boolean | null = null) {\n    if (tokenValid === null) {\n      tokenValid = await this.accessTokenIsValid(accessToken);\n    }\n\n    if (tokenValid === true) {\n      try {\n        await fetch(`https://accounts.google.com/o/oauth2/revoke?token=${encodeURIComponent(accessToken)}`);\n        this.clearStateGoogle();\n      } catch (e) {\n        // ignore\n      }\n      return;\n    } else {\n      this.clearStateGoogle();\n      return;\n    }\n  }\n\n  private persistStateGoogle(accessToken: string, idToken: string) {\n    try {\n      window.localStorage.setItem(this.GOOGLE_STATE_KEY, JSON.stringify({ accessToken, idToken }));\n    } catch (e) {\n      console.error('Cannot persist state google', e);\n    }\n  }\n\n  private clearStateGoogle() {\n    try {\n      window.localStorage.removeItem(this.GOOGLE_STATE_KEY);\n    } catch (e) {\n      console.error('Cannot clear state google', e);\n    }\n  }\n\n  private getGoogleState(): { accessToken: string; idToken: string } | null {\n    try {\n      const state = window.localStorage.getItem(this.GOOGLE_STATE_KEY);\n      if (!state) return null;\n      const { accessToken, idToken } = JSON.parse(state);\n      return { accessToken, idToken };\n    } catch (e) {\n      console.error('Cannot get state google', e);\n      return null;\n    }\n  }\n\n  private async traditionalOAuth<T extends 'google'>({\n    scopes,\n    hostedDomain,\n    nonce,\n    prompt,\n  }: GoogleLoginOptions & { hostedDomain?: string }): Promise<{ provider: T; result: ProviderResponseMap[T] }> {\n    const uniqueScopes = [...new Set([...(scopes || []), 'openid'])];\n\n    const params = new URLSearchParams({\n      client_id: this.clientId ?? '',\n      redirect_uri: this.redirectUrl || window.location.origin + window.location.pathname,\n      response_type: this.loginType === 'offline' ? 'code' : 'token id_token',\n      scope: uniqueScopes.join(' '),\n      ...(nonce && { nonce }),\n      include_granted_scopes: 'true',\n      state: 'popup',\n    });\n    if (hostedDomain !== undefined) {\n      params.append('hd', hostedDomain);\n    }\n    if (prompt !== undefined) {\n      params.append('prompt', prompt);\n    }\n\n    const url = `https://accounts.google.com/o/oauth2/v2/auth?${params.toString()}`;\n    const width = 500;\n    const height = 600;\n    const left = window.screenX + (window.outerWidth - width) / 2;\n    const top = window.screenY + (window.outerHeight - height) / 2;\n    localStorage.setItem(\n      BaseSocialLogin.OAUTH_STATE_KEY,\n      JSON.stringify({ provider: 'google', loginType: this.loginType }),\n    );\n    const popup = window.open(url, 'Google Sign In', `width=${width},height=${height},left=${left},top=${top},popup=1`);\n\n    let popupClosedInterval: number;\n    let timeoutHandle: number;\n\n    // This may never return...\n    return new Promise((resolve, reject) => {\n      if (!popup) {\n        reject(new Error('Failed to open popup'));\n        return;\n      }\n\n      const handleMessage = (event: MessageEvent) => {\n        if (event.origin !== window.location.origin || event.data?.source?.startsWith('angular')) return;\n\n        if (event.data?.type === 'oauth-response') {\n          window.removeEventListener('message', handleMessage);\n          clearInterval(popupClosedInterval);\n          clearTimeout(timeoutHandle);\n\n          if (this.loginType === 'online') {\n            const { accessToken, idToken } = event.data;\n            if (accessToken && idToken) {\n              const profile = this.parseJwt(idToken);\n              this.persistStateGoogle(accessToken.token, idToken);\n              resolve({\n                provider: 'google' as T,\n                result: {\n                  accessToken: {\n                    token: accessToken.token,\n                  },\n                  idToken,\n                  profile: {\n                    email: profile.email || null,\n                    familyName: profile.family_name || null,\n                    givenName: profile.given_name || null,\n                    id: profile.sub || null,\n                    name: profile.name || null,\n                    imageUrl: profile.picture || null,\n                  },\n                  responseType: 'online',\n                },\n              });\n            }\n          } else {\n            const { serverAuthCode } = event.data as {\n              serverAuthCode: string;\n            };\n            resolve({\n              provider: 'google' as T,\n              result: {\n                responseType: 'offline',\n                serverAuthCode,\n              },\n            });\n          }\n        } else if (event.data?.type === 'oauth-error') {\n          window.removeEventListener('message', handleMessage);\n          clearInterval(popupClosedInterval);\n          clearTimeout(timeoutHandle);\n          const errorMessage = event.data.error || 'User cancelled the OAuth flow';\n          reject(new Error(errorMessage));\n        }\n        // Don't reject for non-OAuth messages, just ignore them\n      };\n\n      window.addEventListener('message', handleMessage);\n\n      // Timeout after 5 minutes\n      timeoutHandle = setTimeout(() => {\n        clearTimeout(timeoutHandle);\n        window.removeEventListener('message', handleMessage);\n        popup.close();\n        reject(new Error('OAuth timeout'));\n      }, 300000);\n\n      popupClosedInterval = setInterval(() => {\n        if (popup.closed) {\n          clearInterval(popupClosedInterval);\n          reject(new Error('Popup closed'));\n        }\n      }, 1000);\n    });\n  }\n}\n"]}
+{"version":3,"file":"google-provider.js","sourceRoot":"","sources":["../../src/google-provider.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,QAAQ,CAAC;AAGzC,MAAM,OAAO,iBAAkB,SAAQ,eAAe;IAAtD;;QACU,aAAQ,GAAkB,IAAI,CAAC;QAE/B,cAAS,GAAyB,QAAQ,CAAC;QAE3C,6BAAwB,GAAG,gDAAgD,CAAC;QACnE,qBAAgB,GAAG,iCAAiC,CAAC;IAgexE,CAAC;IA9dC,KAAK,CAAC,UAAU,CACd,QAAuB,EACvB,IAA2B,EAC3B,YAA4B,EAC5B,WAAoB;QAEpB,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,IAAI,EAAE,CAAC;YACT,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QACxB,CAAC;QACD,IAAI,CAAC,YAAY,GAAG,YAAkC,CAAC;QACvD,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;IACjC,CAAC;IAED,KAAK,CAAC,KAAK,CACT,OAA2B;QAE3B,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;QACxE,CAAC;QAED,IAAI,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC;QAElC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACtB,kEAAkE;YAClE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,gDAAgD,CAAC,EAAE,CAAC;gBACvE,MAAM,CAAC,IAAI,CAAC,gDAAgD,CAAC,CAAC;YAChE,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,kDAAkD,CAAC,EAAE,CAAC;gBACzE,MAAM,CAAC,IAAI,CAAC,kDAAkD,CAAC,CAAC;YAClE,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAC/B,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YACxB,CAAC;QACH,CAAC;aAAM,CAAC;YACN,MAAM,GAAG;gBACP,gDAAgD;gBAChD,kDAAkD;gBAClD,QAAQ;aACT,CAAC;QACJ,CAAC;QAED,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QAEvE,kEAAkE;QAClE,OAAO,IAAI,CAAC,gBAAgB,CAAC;YAC3B,MAAM;YACN,KAAK;YACL,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,MAAM,EAAE,OAAO,CAAC,MAAM;SACvB,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,MAAM;QACV,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACjC,OAAO,OAAO,CAAC,MAAM,CAAC,6DAA6D,CAAC,CAAC;QACvF,CAAC;QACD,2BAA2B;QAC3B,MAAM,KAAK,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;QACpC,IAAI,CAAC,KAAK;YAAE,OAAO;QACnB,MAAM,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAChD,CAAC;IAED,KAAK,CAAC,UAAU;QACd,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACjC,OAAO,OAAO,CAAC,MAAM,CAAC,iEAAiE,CAAC,CAAC;QAC3F,CAAC;QACD,2BAA2B;QAC3B,MAAM,KAAK,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;QACpC,IAAI,CAAC,KAAK;YAAE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;QAEzC,IAAI,CAAC;YACH,MAAM,kBAAkB,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;YAC5E,MAAM,cAAc,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACxD,IAAI,kBAAkB,IAAI,cAAc,EAAE,CAAC;gBACzC,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;YAC9B,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC;oBACH,MAAM,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;gBACvD,CAAC;gBAAC,OAAO,CAAC,EAAE,CAAC;oBACX,OAAO,CAAC,KAAK,CAAC,8CAA8C,EAAE,CAAC,CAAC,CAAC;gBACnE,CAAC;gBACD,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;YAC/B,CAAC;QACH,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC;IAED,KAAK,CAAC,oBAAoB;QACxB,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;YACjC,OAAO,OAAO,CAAC,MAAM,CAAC,2EAA2E,CAAC,CAAC;QACrG,CAAC;QACD,2BAA2B;QAC3B,MAAM,KAAK,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;QACpC,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QAEtE,IAAI,CAAC;YACH,MAAM,kBAAkB,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;YAC5E,MAAM,cAAc,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACxD,IAAI,kBAAkB,IAAI,cAAc,EAAE,CAAC;gBACzC,OAAO,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,GAAG,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;YAChE,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC;oBACH,MAAM,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;gBACvD,CAAC;gBAAC,OAAO,CAAC,EAAE,CAAC;oBACX,OAAO,CAAC,KAAK,CAAC,8CAA8C,EAAE,CAAC,CAAC,CAAC;gBACnE,CAAC;gBACD,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;YAC5D,CAAC;QACH,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC;IAED,KAAK,CAAC,OAAO;QACX,kDAAkD;QAClD,OAAO,OAAO,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;IAC3C,CAAC;IAED,mBAAmB,CAAC,GAAQ;QAC1B,MAAM,SAAS,GAAG,GAAG,CAAC,YAAY,CAAC;QAEnC,6DAA6D;QAC7D,MAAM,aAAa,GAAG,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC7C,IAAI,aAAa,EAAE,CAAC;YAClB,YAAY,CAAC,UAAU,CAAC,eAAe,CAAC,eAAe,CAAC,CAAC;YACzD,MAAM,gBAAgB,GAAG,SAAS,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,aAAa,CAAC;YAC7E,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC;QACrC,CAAC;QAED,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAEnC,IAAI,IAAI,IAAI,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YACnC,OAAO;gBACL,QAAQ,EAAE,QAAQ;gBAClB,MAAM,EAAE;oBACN,cAAc,EAAE,IAAI;oBACpB,YAAY,EAAE,SAAS;iBACxB;aACF,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QACnC,OAAO,CAAC,GAAG,CAAC,qBAAqB,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;QAE7C,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC;QAEvB,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC;QAEzC,uDAAuD;QACvD,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAClC,IAAI,KAAK,EAAE,CAAC;YACV,YAAY,CAAC,UAAU,CAAC,eAAe,CAAC,eAAe,CAAC,CAAC;YACzD,MAAM,gBAAgB,GAAG,MAAM,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,KAAK,CAAC;YAClE,OAAO,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC;QACrC,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;QAEtC,MAAM,WAAW,GAAG,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QAC/C,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAEvC,IAAI,WAAW,IAAI,OAAO,EAAE,CAAC;YAC3B,YAAY,CAAC,UAAU,CAAC,eAAe,CAAC,eAAe,CAAC,CAAC;YACzD,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YACvC,OAAO;gBACL,QAAQ,EAAE,QAAQ;gBAClB,MAAM,EAAE;oBACN,WAAW,EAAE;wBACX,KAAK,EAAE,WAAW;qBACnB;oBACD,OAAO;oBACP,OAAO,EAAE;wBACP,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,IAAI;wBAC5B,UAAU,EAAE,OAAO,CAAC,WAAW,IAAI,IAAI;wBACvC,SAAS,EAAE,OAAO,CAAC,UAAU,IAAI,IAAI;wBACrC,EAAE,EAAE,OAAO,CAAC,GAAG,IAAI,IAAI;wBACvB,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,IAAI;wBAC1B,QAAQ,EAAE,OAAO,CAAC,OAAO,IAAI,IAAI;qBAClC;oBACD,YAAY,EAAE,QAAQ;iBACvB;aACF,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,KAAK,CAAC,kBAAkB,CAAC,WAAmB;QAClD,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,wBAAwB,iBAAiB,kBAAkB,CAAC,WAAW,CAAC,EAAE,CAAC;QAE/F,IAAI,CAAC;YACH,mCAAmC;YACnC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,CAAC;YAElC,sCAAsC;YACtC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,OAAO,CAAC,GAAG,CACT,yBAAyB,IAAI,CAAC,wBAAwB,2CAA2C,QAAQ,CAAC,MAAM,wCAAwC,CACzJ,CAAC;gBACF,OAAO,KAAK,CAAC;YACf,CAAC;YAED,gCAAgC;YAChC,MAAM,YAAY,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YAE3C,IAAI,CAAC,YAAY,EAAE,CAAC;gBAClB,OAAO,CAAC,KAAK,CAAC,yBAAyB,IAAI,CAAC,wBAAwB,yBAAyB,CAAC,CAAC;gBAC/F,MAAM,IAAI,KAAK,CAAC,yBAAyB,IAAI,CAAC,wBAAwB,yBAAyB,CAAC,CAAC;YACnG,CAAC;YAED,kCAAkC;YAClC,IAAI,UAAe,CAAC;YACpB,IAAI,CAAC;gBACH,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;YACxC,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,OAAO,CAAC,KAAK,CACX,yBAAyB,IAAI,CAAC,wBAAwB,6CAA6C,CAAC,EAAE,CACvG,CAAC;gBACF,MAAM,IAAI,KAAK,CACb,yBAAyB,IAAI,CAAC,wBAAwB,6CAA6C,CAAC,EAAE,CACvG,CAAC;YACJ,CAAC;YAED,iCAAiC;YACjC,MAAM,YAAY,GAAG,UAAU,CAAC,YAAY,CAAC,CAAC;YAE9C,IAAI,YAAY,KAAK,SAAS,IAAI,YAAY,KAAK,IAAI,EAAE,CAAC;gBACxD,OAAO,CAAC,KAAK,CACX,yBAAyB,IAAI,CAAC,wBAAwB,gDAAgD,CACvG,CAAC;gBACF,MAAM,IAAI,KAAK,CACb,yBAAyB,IAAI,CAAC,wBAAwB,gDAAgD,CACvG,CAAC;YACJ,CAAC;YAED,mCAAmC;YACnC,IAAI,YAAoB,CAAC;YACzB,IAAI,CAAC;gBACH,YAAY,GAAG,QAAQ,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;gBAC1C,IAAI,KAAK,CAAC,YAAY,CAAC,EAAE,CAAC;oBACxB,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;gBACzD,CAAC;YACH,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,OAAO,CAAC,KAAK,CACX,yBAAyB,IAAI,CAAC,wBAAwB,mBAAmB,YAAY,mCAAmC,CAAC,EAAE,CAC5H,CAAC;gBACF,MAAM,IAAI,KAAK,CACb,yBAAyB,IAAI,CAAC,wBAAwB,mBAAmB,YAAY,mCAAmC,CAAC,EAAE,CAC5H,CAAC;YACJ,CAAC;YAED,+DAA+D;YAC/D,OAAO,YAAY,GAAG,CAAC,CAAC;QAC1B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACrB,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAEO,YAAY,CAAC,OAAe;QAClC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YACtC,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,8CAA8C;YACpG,OAAO,MAAM,CAAC,GAAG,IAAI,WAAW,GAAG,MAAM,CAAC,GAAG,CAAC;QAChD,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,eAAe,CAAC,WAAmB,EAAE,aAA6B,IAAI;QAClF,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;YACxB,UAAU,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,WAAW,CAAC,CAAC;QAC1D,CAAC;QAED,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;YACxB,IAAI,CAAC;gBACH,MAAM,KAAK,CAAC,qDAAqD,kBAAkB,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;gBACpG,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC1B,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,SAAS;YACX,CAAC;YACD,OAAO;QACT,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACxB,OAAO;QACT,CAAC;IACH,CAAC;IAEO,kBAAkB,CAAC,WAAmB,EAAE,OAAe;QAC7D,IAAI,CAAC;YACH,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,gBAAgB,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;QAC/F,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,CAAC,KAAK,CAAC,6BAA6B,EAAE,CAAC,CAAC,CAAC;QAClD,CAAC;IACH,CAAC;IAEO,gBAAgB;QACtB,IAAI,CAAC;YACH,MAAM,CAAC,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QACxD,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,CAAC,KAAK,CAAC,2BAA2B,EAAE,CAAC,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;IAEO,cAAc;QACpB,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;YACjE,IAAI,CAAC,KAAK;gBAAE,OAAO,IAAI,CAAC;YACxB,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACnD,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC;QAClC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,CAAC,KAAK,CAAC,yBAAyB,EAAE,CAAC,CAAC,CAAC;YAC5C,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,gBAAgB,CAAqB,EACjD,MAAM,EACN,YAAY,EACZ,KAAK,EACL,MAAM,GACyC;;QAC/C,MAAM,YAAY,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC;QAEjE,MAAM,MAAM,GAAG,IAAI,eAAe,+BAChC,SAAS,EAAE,MAAA,IAAI,CAAC,QAAQ,mCAAI,EAAE,EAC9B,YAAY,EAAE,IAAI,CAAC,WAAW,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,EACnF,aAAa,EAAE,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,gBAAgB,EACvE,KAAK,EAAE,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,IAC1B,CAAC,KAAK,IAAI,EAAE,KAAK,EAAE,CAAC,KACvB,sBAAsB,EAAE,MAAM,EAC9B,KAAK,EAAE,OAAO,IACd,CAAC;QACH,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;YAC/B,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;QACpC,CAAC;QACD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAClC,CAAC;QAED,MAAM,GAAG,GAAG,gDAAgD,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;QAChF,MAAM,KAAK,GAAG,GAAG,CAAC;QAClB,MAAM,MAAM,GAAG,GAAG,CAAC;QACnB,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,GAAG,CAAC,MAAM,CAAC,UAAU,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;QAC9D,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,GAAG,CAAC,MAAM,CAAC,WAAW,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QAC/D,YAAY,CAAC,OAAO,CAClB,eAAe,CAAC,eAAe,EAC/B,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAClE,CAAC;QACF,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,gBAAgB,EAAE,SAAS,KAAK,WAAW,MAAM,SAAS,IAAI,QAAQ,GAAG,UAAU,CAAC,CAAC;QAEpH,IAAI,mBAA2B,CAAC;QAChC,IAAI,aAAqB,CAAC;QAE1B,uFAAuF;QACvF,MAAM,WAAW,GAAG,gBAAgB,KAAK,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QAC1D,IAAI,gBAAgB,GAA4B,IAAI,CAAC;QAErD,IAAI,CAAC;YACH,gBAAgB,GAAG,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;QACvD,CAAC;QAAC,WAAM,CAAC;YACP,gEAAgE;QAClE,CAAC;QAED,2BAA2B;QAC3B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,MAAM,CAAC,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAAC;gBAC1C,OAAO;YACT,CAAC;YAED,MAAM,OAAO,GAAG,GAAG,EAAE;gBACnB,MAAM,CAAC,mBAAmB,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;gBACrD,aAAa,CAAC,mBAAmB,CAAC,CAAC;gBACnC,YAAY,CAAC,aAAa,CAAC,CAAC;gBAC5B,IAAI,gBAAgB,EAAE,CAAC;oBACrB,gBAAgB,CAAC,KAAK,EAAE,CAAC;gBAC3B,CAAC;YACH,CAAC,CAAC;YAEF,MAAM,oBAAoB,GAAG,CAAC,IAA6B,EAAE,EAAE;gBAC7D,IAAI,IAAI,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;oBAChC,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,GAAG,IAA6D,CAAC;oBAC/F,IAAI,WAAW,IAAI,OAAO,EAAE,CAAC;wBAC3B,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;wBACvC,IAAI,CAAC,kBAAkB,CAAC,WAAW,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;wBACpD,OAAO,CAAC;4BACN,QAAQ,EAAE,QAAa;4BACvB,MAAM,EAAE;gCACN,WAAW,EAAE;oCACX,KAAK,EAAE,WAAW,CAAC,KAAK;iCACzB;gCACD,OAAO;gCACP,OAAO,EAAE;oCACP,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,IAAI;oCAC5B,UAAU,EAAE,OAAO,CAAC,WAAW,IAAI,IAAI;oCACvC,SAAS,EAAE,OAAO,CAAC,UAAU,IAAI,IAAI;oCACrC,EAAE,EAAE,OAAO,CAAC,GAAG,IAAI,IAAI;oCACvB,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,IAAI;oCAC1B,QAAQ,EAAE,OAAO,CAAC,OAAO,IAAI,IAAI;iCAClC;gCACD,YAAY,EAAE,QAAQ;6BACvB;yBACF,CAAC,CAAC;oBACL,CAAC;gBACH,CAAC;qBAAM,CAAC;oBACN,MAAM,EAAE,cAAc,EAAE,GAAG,IAAkC,CAAC;oBAC9D,OAAO,CAAC;wBACN,QAAQ,EAAE,QAAa;wBACvB,MAAM,EAAE;4BACN,YAAY,EAAE,SAAS;4BACvB,cAAc;yBACf;qBACF,CAAC,CAAC;gBACL,CAAC;YACH,CAAC,CAAC;YAEF,MAAM,aAAa,GAAG,CAAC,KAAmB,EAAE,EAAE;;gBAC5C,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAI,MAAA,MAAA,KAAK,CAAC,IAAI,0CAAE,MAAM,0CAAE,UAAU,CAAC,SAAS,CAAC,CAAA;oBAAE,OAAO;gBAEjG,IAAI,CAAA,MAAA,KAAK,CAAC,IAAI,0CAAE,IAAI,MAAK,gBAAgB,EAAE,CAAC;oBAC1C,OAAO,EAAE,CAAC;oBACV,oBAAoB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBACnC,CAAC;qBAAM,IAAI,CAAA,MAAA,KAAK,CAAC,IAAI,0CAAE,IAAI,MAAK,aAAa,EAAE,CAAC;oBAC9C,OAAO,EAAE,CAAC;oBACV,MAAM,YAAY,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,+BAA+B,CAAC;oBACzE,MAAM,CAAC,IAAI,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC;gBAClC,CAAC;gBACD,wDAAwD;YAC1D,CAAC,CAAC;YAEF,uCAAuC;YACvC,IAAI,gBAAgB,EAAE,CAAC;gBACrB,gBAAgB,CAAC,SAAS,GAAG,CAAC,KAAmB,EAAE,EAAE;;oBACnD,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;oBACxB,IAAI,MAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,MAAM,0CAAE,QAAQ,GAAG,UAAU,CAAC,SAAS,CAAC;wBAAE,OAAO;oBAE3D,IAAI,CAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,IAAI,MAAK,gBAAgB,EAAE,CAAC;wBACpC,OAAO,EAAE,CAAC;wBACV,oBAAoB,CAAC,IAAI,CAAC,CAAC;oBAC7B,CAAC;yBAAM,IAAI,CAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,IAAI,MAAK,aAAa,EAAE,CAAC;wBACxC,OAAO,EAAE,CAAC;wBACV,MAAM,YAAY,GAAI,IAAI,CAAC,KAAgB,IAAI,+BAA+B,CAAC;wBAC/E,MAAM,CAAC,IAAI,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC;oBAClC,CAAC;gBACH,CAAC,CAAC;YACJ,CAAC;YAED,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;YAElD,0BAA0B;YAC1B,aAAa,GAAG,UAAU,CAAC,GAAG,EAAE;gBAC9B,OAAO,EAAE,CAAC;gBACV,IAAI,CAAC;oBACH,KAAK,CAAC,KAAK,EAAE,CAAC;gBAChB,CAAC;gBAAC,WAAM,CAAC;oBACP,0CAA0C;gBAC5C,CAAC;gBACD,MAAM,CAAC,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC;YACrC,CAAC,EAAE,MAAM,CAAC,CAAC;YAEX,mBAAmB,GAAG,WAAW,CAAC,GAAG,EAAE;gBACrC,IAAI,CAAC;oBACH,mFAAmF;oBACnF,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;wBACjB,OAAO,EAAE,CAAC;wBACV,MAAM,CAAC,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC;oBACpC,CAAC;gBACH,CAAC;gBAAC,WAAM,CAAC;oBACP,8EAA8E;oBAC9E,2EAA2E;oBAC3E,wFAAwF;oBACxF,aAAa,CAAC,mBAAmB,CAAC,CAAC;gBACrC,CAAC;YACH,CAAC,EAAE,IAAI,CAAC,CAAC;QACX,CAAC,CAAC,CAAC;IACL,CAAC;CACF","sourcesContent":["import { BaseSocialLogin } from './base';\nimport type { GoogleLoginOptions, LoginResult, ProviderResponseMap, AuthorizationCode } from './definitions';\n\nexport class GoogleSocialLogin extends BaseSocialLogin {\n  private clientId: string | null = null;\n  private hostedDomain?: string;\n  private loginType: 'online' | 'offline' = 'online';\n  private redirectUrl?: string;\n  private GOOGLE_TOKEN_REQUEST_URL = 'https://www.googleapis.com/oauth2/v3/tokeninfo';\n  private readonly GOOGLE_STATE_KEY = 'capgo_social_login_google_state';\n\n  async initialize(\n    clientId: string | null,\n    mode?: 'online' | 'offline',\n    hostedDomain?: string | null,\n    redirectUrl?: string,\n  ): Promise<void> {\n    this.clientId = clientId;\n    if (mode) {\n      this.loginType = mode;\n    }\n    this.hostedDomain = hostedDomain as string | undefined;\n    this.redirectUrl = redirectUrl;\n  }\n\n  async login<T extends 'google'>(\n    options: GoogleLoginOptions,\n  ): Promise<{ provider: T; result: ProviderResponseMap[T] }> {\n    if (!this.clientId) {\n      throw new Error('Google Client ID not set. Call initialize() first.');\n    }\n\n    let scopes = options.scopes || [];\n\n    if (scopes.length > 0) {\n      // If scopes are provided, directly use the traditional OAuth flow\n      if (!scopes.includes('https://www.googleapis.com/auth/userinfo.email')) {\n        scopes.push('https://www.googleapis.com/auth/userinfo.email');\n      }\n      if (!scopes.includes('https://www.googleapis.com/auth/userinfo.profile')) {\n        scopes.push('https://www.googleapis.com/auth/userinfo.profile');\n      }\n      if (!scopes.includes('openid')) {\n        scopes.push('openid');\n      }\n    } else {\n      scopes = [\n        'https://www.googleapis.com/auth/userinfo.email',\n        'https://www.googleapis.com/auth/userinfo.profile',\n        'openid',\n      ];\n    }\n\n    const nonce = options.nonce || Math.random().toString(36).substring(2);\n\n    // If scopes are provided, directly use the traditional OAuth flow\n    return this.traditionalOAuth({\n      scopes,\n      nonce,\n      hostedDomain: this.hostedDomain,\n      prompt: options.prompt,\n    });\n  }\n\n  async logout(): Promise<void> {\n    if (this.loginType === 'offline') {\n      return Promise.reject(\"Offline login doesn't store tokens. logout is not available\");\n    }\n    // eslint-disable-next-line\n    const state = this.getGoogleState();\n    if (!state) return;\n    await this.rawLogoutGoogle(state.accessToken);\n  }\n\n  async isLoggedIn(): Promise<{ isLoggedIn: boolean }> {\n    if (this.loginType === 'offline') {\n      return Promise.reject(\"Offline login doesn't store tokens. isLoggedIn is not available\");\n    }\n    // eslint-disable-next-line\n    const state = this.getGoogleState();\n    if (!state) return { isLoggedIn: false };\n\n    try {\n      const isValidAccessToken = await this.accessTokenIsValid(state.accessToken);\n      const isValidIdToken = this.idTokenValid(state.idToken);\n      if (isValidAccessToken && isValidIdToken) {\n        return { isLoggedIn: true };\n      } else {\n        try {\n          await this.rawLogoutGoogle(state.accessToken, false);\n        } catch (e) {\n          console.error('Access token is not valid, but cannot logout', e);\n        }\n        return { isLoggedIn: false };\n      }\n    } catch (e) {\n      return Promise.reject(e);\n    }\n  }\n\n  async getAuthorizationCode(): Promise<AuthorizationCode> {\n    if (this.loginType === 'offline') {\n      return Promise.reject(\"Offline login doesn't store tokens. getAuthorizationCode is not available\");\n    }\n    // eslint-disable-next-line\n    const state = this.getGoogleState();\n    if (!state) throw new Error('No Google authorization code available');\n\n    try {\n      const isValidAccessToken = await this.accessTokenIsValid(state.accessToken);\n      const isValidIdToken = this.idTokenValid(state.idToken);\n      if (isValidAccessToken && isValidIdToken) {\n        return { accessToken: state.accessToken, jwt: state.idToken };\n      } else {\n        try {\n          await this.rawLogoutGoogle(state.accessToken, false);\n        } catch (e) {\n          console.error('Access token is not valid, but cannot logout', e);\n        }\n        throw new Error('No Google authorization code available');\n      }\n    } catch (e) {\n      return Promise.reject(e);\n    }\n  }\n\n  async refresh(): Promise<void> {\n    // For Google, we can prompt for re-authentication\n    return Promise.reject('Not implemented');\n  }\n\n  handleOAuthRedirect(url: URL): LoginResult | { error: string } | null {\n    const paramsRaw = url.searchParams;\n\n    // Check for errors in search params first (for offline mode)\n    const errorInParams = paramsRaw.get('error');\n    if (errorInParams) {\n      localStorage.removeItem(BaseSocialLogin.OAUTH_STATE_KEY);\n      const errorDescription = paramsRaw.get('error_description') || errorInParams;\n      return { error: errorDescription };\n    }\n\n    const code = paramsRaw.get('code');\n\n    if (code && paramsRaw.has('scope')) {\n      return {\n        provider: 'google',\n        result: {\n          serverAuthCode: code,\n          responseType: 'offline',\n        },\n      };\n    }\n\n    const hash = url.hash.substring(1);\n    console.log('handleOAuthRedirect', url.hash);\n\n    if (!hash) return null;\n\n    const params = new URLSearchParams(hash);\n\n    // Check for error cases in hash (e.g., user cancelled)\n    const error = params.get('error');\n    if (error) {\n      localStorage.removeItem(BaseSocialLogin.OAUTH_STATE_KEY);\n      const errorDescription = params.get('error_description') || error;\n      return { error: errorDescription };\n    }\n\n    console.log('handleOAuthRedirect ok');\n\n    const accessToken = params.get('access_token');\n    const idToken = params.get('id_token');\n\n    if (accessToken && idToken) {\n      localStorage.removeItem(BaseSocialLogin.OAUTH_STATE_KEY);\n      const profile = this.parseJwt(idToken);\n      return {\n        provider: 'google',\n        result: {\n          accessToken: {\n            token: accessToken,\n          },\n          idToken,\n          profile: {\n            email: profile.email || null,\n            familyName: profile.family_name || null,\n            givenName: profile.given_name || null,\n            id: profile.sub || null,\n            name: profile.name || null,\n            imageUrl: profile.picture || null,\n          },\n          responseType: 'online',\n        },\n      };\n    }\n    return null;\n  }\n\n  private async accessTokenIsValid(accessToken: string): Promise<boolean> {\n    const url = `${this.GOOGLE_TOKEN_REQUEST_URL}?access_token=${encodeURIComponent(accessToken)}`;\n\n    try {\n      // Make the GET request using fetch\n      const response = await fetch(url);\n\n      // Check if the response is successful\n      if (!response.ok) {\n        console.log(\n          `Invalid response from ${this.GOOGLE_TOKEN_REQUEST_URL}. Response not successful. Status code: ${response.status}. Assuming that the token is not valid`,\n        );\n        return false;\n      }\n\n      // Get the response body as text\n      const responseBody = await response.text();\n\n      if (!responseBody) {\n        console.error(`Invalid response from ${this.GOOGLE_TOKEN_REQUEST_URL}. Response body is null`);\n        throw new Error(`Invalid response from ${this.GOOGLE_TOKEN_REQUEST_URL}. Response body is null`);\n      }\n\n      // Parse the response body as JSON\n      let jsonObject: any;\n      try {\n        jsonObject = JSON.parse(responseBody);\n      } catch (e) {\n        console.error(\n          `Invalid response from ${this.GOOGLE_TOKEN_REQUEST_URL}. Response body is not valid JSON. Error: ${e}`,\n        );\n        throw new Error(\n          `Invalid response from ${this.GOOGLE_TOKEN_REQUEST_URL}. Response body is not valid JSON. Error: ${e}`,\n        );\n      }\n\n      // Extract the 'expires_in' field\n      const expiresInStr = jsonObject['expires_in'];\n\n      if (expiresInStr === undefined || expiresInStr === null) {\n        console.error(\n          `Invalid response from ${this.GOOGLE_TOKEN_REQUEST_URL}. Response JSON does not include 'expires_in'.`,\n        );\n        throw new Error(\n          `Invalid response from ${this.GOOGLE_TOKEN_REQUEST_URL}. Response JSON does not include 'expires_in'.`,\n        );\n      }\n\n      // Parse 'expires_in' as an integer\n      let expiresInInt: number;\n      try {\n        expiresInInt = parseInt(expiresInStr, 10);\n        if (isNaN(expiresInInt)) {\n          throw new Error(`'expires_in' is not a valid integer`);\n        }\n      } catch (e) {\n        console.error(\n          `Invalid response from ${this.GOOGLE_TOKEN_REQUEST_URL}. 'expires_in': ${expiresInStr} is not a valid integer. Error: ${e}`,\n        );\n        throw new Error(\n          `Invalid response from ${this.GOOGLE_TOKEN_REQUEST_URL}. 'expires_in': ${expiresInStr} is not a valid integer. Error: ${e}`,\n        );\n      }\n\n      // Determine if the access token is valid based on 'expires_in'\n      return expiresInInt > 5;\n    } catch (error) {\n      console.error(error);\n      throw error;\n    }\n  }\n\n  private idTokenValid(idToken: string): boolean {\n    try {\n      const parsed = this.parseJwt(idToken);\n      const currentTime = Math.ceil(Date.now() / 1000) + 5; // Convert current time to seconds since epoch\n      return parsed.exp && currentTime < parsed.exp;\n    } catch (e) {\n      return false;\n    }\n  }\n\n  private async rawLogoutGoogle(accessToken: string, tokenValid: boolean | null = null) {\n    if (tokenValid === null) {\n      tokenValid = await this.accessTokenIsValid(accessToken);\n    }\n\n    if (tokenValid === true) {\n      try {\n        await fetch(`https://accounts.google.com/o/oauth2/revoke?token=${encodeURIComponent(accessToken)}`);\n        this.clearStateGoogle();\n      } catch (e) {\n        // ignore\n      }\n      return;\n    } else {\n      this.clearStateGoogle();\n      return;\n    }\n  }\n\n  private persistStateGoogle(accessToken: string, idToken: string) {\n    try {\n      window.localStorage.setItem(this.GOOGLE_STATE_KEY, JSON.stringify({ accessToken, idToken }));\n    } catch (e) {\n      console.error('Cannot persist state google', e);\n    }\n  }\n\n  private clearStateGoogle() {\n    try {\n      window.localStorage.removeItem(this.GOOGLE_STATE_KEY);\n    } catch (e) {\n      console.error('Cannot clear state google', e);\n    }\n  }\n\n  private getGoogleState(): { accessToken: string; idToken: string } | null {\n    try {\n      const state = window.localStorage.getItem(this.GOOGLE_STATE_KEY);\n      if (!state) return null;\n      const { accessToken, idToken } = JSON.parse(state);\n      return { accessToken, idToken };\n    } catch (e) {\n      console.error('Cannot get state google', e);\n      return null;\n    }\n  }\n\n  private async traditionalOAuth<T extends 'google'>({\n    scopes,\n    hostedDomain,\n    nonce,\n    prompt,\n  }: GoogleLoginOptions & { hostedDomain?: string }): Promise<{ provider: T; result: ProviderResponseMap[T] }> {\n    const uniqueScopes = [...new Set([...(scopes || []), 'openid'])];\n\n    const params = new URLSearchParams({\n      client_id: this.clientId ?? '',\n      redirect_uri: this.redirectUrl || window.location.origin + window.location.pathname,\n      response_type: this.loginType === 'offline' ? 'code' : 'token id_token',\n      scope: uniqueScopes.join(' '),\n      ...(nonce && { nonce }),\n      include_granted_scopes: 'true',\n      state: 'popup',\n    });\n    if (hostedDomain !== undefined) {\n      params.append('hd', hostedDomain);\n    }\n    if (prompt !== undefined) {\n      params.append('prompt', prompt);\n    }\n\n    const url = `https://accounts.google.com/o/oauth2/v2/auth?${params.toString()}`;\n    const width = 500;\n    const height = 600;\n    const left = window.screenX + (window.outerWidth - width) / 2;\n    const top = window.screenY + (window.outerHeight - height) / 2;\n    localStorage.setItem(\n      BaseSocialLogin.OAUTH_STATE_KEY,\n      JSON.stringify({ provider: 'google', loginType: this.loginType }),\n    );\n    const popup = window.open(url, 'Google Sign In', `width=${width},height=${height},left=${left},top=${top},popup=1`);\n\n    let popupClosedInterval: number;\n    let timeoutHandle: number;\n\n    // Use BroadcastChannel for cross-origin communication (works when postMessage doesn't)\n    const channelName = `google_oauth_${nonce || Date.now()}`;\n    let broadcastChannel: BroadcastChannel | null = null;\n\n    try {\n      broadcastChannel = new BroadcastChannel(channelName);\n    } catch {\n      // BroadcastChannel not supported, fall back to postMessage only\n    }\n\n    // This may never return...\n    return new Promise((resolve, reject) => {\n      if (!popup) {\n        reject(new Error('Failed to open popup'));\n        return;\n      }\n\n      const cleanup = () => {\n        window.removeEventListener('message', handleMessage);\n        clearInterval(popupClosedInterval);\n        clearTimeout(timeoutHandle);\n        if (broadcastChannel) {\n          broadcastChannel.close();\n        }\n      };\n\n      const processOAuthResponse = (data: Record<string, unknown>) => {\n        if (this.loginType === 'online') {\n          const { accessToken, idToken } = data as { accessToken?: { token: string }; idToken?: string };\n          if (accessToken && idToken) {\n            const profile = this.parseJwt(idToken);\n            this.persistStateGoogle(accessToken.token, idToken);\n            resolve({\n              provider: 'google' as T,\n              result: {\n                accessToken: {\n                  token: accessToken.token,\n                },\n                idToken,\n                profile: {\n                  email: profile.email || null,\n                  familyName: profile.family_name || null,\n                  givenName: profile.given_name || null,\n                  id: profile.sub || null,\n                  name: profile.name || null,\n                  imageUrl: profile.picture || null,\n                },\n                responseType: 'online',\n              },\n            });\n          }\n        } else {\n          const { serverAuthCode } = data as { serverAuthCode: string };\n          resolve({\n            provider: 'google' as T,\n            result: {\n              responseType: 'offline',\n              serverAuthCode,\n            },\n          });\n        }\n      };\n\n      const handleMessage = (event: MessageEvent) => {\n        if (event.origin !== window.location.origin || event.data?.source?.startsWith('angular')) return;\n\n        if (event.data?.type === 'oauth-response') {\n          cleanup();\n          processOAuthResponse(event.data);\n        } else if (event.data?.type === 'oauth-error') {\n          cleanup();\n          const errorMessage = event.data.error || 'User cancelled the OAuth flow';\n          reject(new Error(errorMessage));\n        }\n        // Don't reject for non-OAuth messages, just ignore them\n      };\n\n      // Listen for BroadcastChannel messages\n      if (broadcastChannel) {\n        broadcastChannel.onmessage = (event: MessageEvent) => {\n          const data = event.data;\n          if (data?.source?.toString().startsWith('angular')) return;\n\n          if (data?.type === 'oauth-response') {\n            cleanup();\n            processOAuthResponse(data);\n          } else if (data?.type === 'oauth-error') {\n            cleanup();\n            const errorMessage = (data.error as string) || 'User cancelled the OAuth flow';\n            reject(new Error(errorMessage));\n          }\n        };\n      }\n\n      window.addEventListener('message', handleMessage);\n\n      // Timeout after 5 minutes\n      timeoutHandle = setTimeout(() => {\n        cleanup();\n        try {\n          popup.close();\n        } catch {\n          // Ignore cross-origin errors when closing\n        }\n        reject(new Error('OAuth timeout'));\n      }, 300000);\n\n      popupClosedInterval = setInterval(() => {\n        try {\n          // Check if popup is closed - this may throw cross-origin errors for some providers\n          if (popup.closed) {\n            cleanup();\n            reject(new Error('Popup closed'));\n          }\n        } catch {\n          // Cross-origin error when checking popup.closed - this happens when the popup\n          // navigates to a third-party OAuth provider with strict security settings.\n          // We can't detect if the window was closed, so we rely on timeout and message handlers.\n          clearInterval(popupClosedInterval);\n        }\n      }, 1000);\n    });\n  }\n}\n"]}

package/dist/esm/oauth2-provider.js

@@ -112,52 +112,95 @@ export class OAuth2SocialLogin extends BaseSocialLogin {
                 reject(new Error('Unable to open login window. Please allow popups.'));
                 return;
             }
+            // Use BroadcastChannel for cross-origin communication (works when postMessage doesn't)
+            const channelName = `oauth2_${state}`;
+            let broadcastChannel = null;
+            try {
+                broadcastChannel = new BroadcastChannel(channelName);
+            }
+            catch (_a) {
+                // BroadcastChannel not supported, fall back to postMessage only
+                if (config.logsEnabled) {
+                    console.log(`[OAuth2:${providerId}] BroadcastChannel not supported, using postMessage only`);
+                }
+            }
             const cleanup = (messageHandler, timeoutHandle, intervalHandle) => {
                 window.removeEventListener('message', messageHandler);
                 clearTimeout(timeoutHandle);
                 clearInterval(intervalHandle);
-            };
-            const messageHandler = (event) => {
-                var _a, _b, _c, _d, _e;
-                if (event.origin !== window.location.origin) {
-                    return;
+                if (broadcastChannel) {
+                    broadcastChannel.close();
                 }
-                if (((_a = event.data) === null || _a === void 0 ? void 0 : _a.type) === 'oauth-response') {
-                    if (((_b = event.data) === null || _b === void 0 ? void 0 : _b.provider) && event.data.provider !== 'oauth2') {
-                        return;
+            };
+            const handleOAuthMessage = (data) => {
+                if ((data === null || data === void 0 ? void 0 : data.type) === 'oauth-response') {
+                    if ((data === null || data === void 0 ? void 0 : data.provider) && data.provider !== 'oauth2') {
+                        return false;
                     }
                     // Check providerId matches if present
-                    if (((_c = event.data) === null || _c === void 0 ? void 0 : _c.providerId) && event.data.providerId !== providerId) {
-                        return;
+                    if ((data === null || data === void 0 ? void 0 : data.providerId) && data.providerId !== providerId) {
+                        return false;
                     }
                     cleanup(messageHandler, timeoutHandle, popupClosedInterval);
                     // eslint-disable-next-line @typescript-eslint/no-unused-vars
-                    const _f = event.data, { provider: _ignoredProvider, type: _ignoredType } = _f, payload = __rest(_f, ["provider", "type"]);
+                    const _a = data, { provider: _ignoredProvider, type: _ignoredType } = _a, payload = __rest(_a, ["provider", "type"]);
                     resolve({
                         provider: 'oauth2',
                         result: payload,
                     });
+                    return true;
                 }
-                else if (((_d = event.data) === null || _d === void 0 ? void 0 : _d.type) === 'oauth-error') {
-                    if (((_e = event.data) === null || _e === void 0 ? void 0 : _e.provider) && event.data.provider !== 'oauth2') {
-                        return;
+                else if ((data === null || data === void 0 ? void 0 : data.type) === 'oauth-error') {
+                    if ((data === null || data === void 0 ? void 0 : data.provider) && data.provider !== 'oauth2') {
+                        return false;
                     }
                     cleanup(messageHandler, timeoutHandle, popupClosedInterval);
-                    reject(new Error(event.data.error || 'OAuth2 login was cancelled.'));
+                    reject(new Error(data.error || 'OAuth2 login was cancelled.'));
+                    return true;
                 }
+                return false;
+            };
+            // Listen for BroadcastChannel messages
+            if (broadcastChannel) {
+                broadcastChannel.onmessage = (event) => {
+                    handleOAuthMessage(event.data);
+                };
+            }
+            const messageHandler = (event) => {
+                if (event.origin !== window.location.origin) {
+                    return;
+                }
+                handleOAuthMessage(event.data);
             };
             window.addEventListener('message', messageHandler);
             const timeoutHandle = window.setTimeout(() => {
-                window.removeEventListener('message', messageHandler);
-                popup.close();
+                cleanup(messageHandler, timeoutHandle, popupClosedInterval);
+                try {
+                    popup.close();
+                }
+                catch (_a) {
+                    // Ignore cross-origin errors when closing
+                }
                 reject(new Error('OAuth2 login timed out.'));
             }, 300000);
             const popupClosedInterval = window.setInterval(() => {
-                if (popup.closed) {
-                    window.removeEventListener('message', messageHandler);
+                try {
+                    // Check if popup is closed - this may throw cross-origin errors for some providers
+                    if (popup.closed) {
+                        cleanup(messageHandler, timeoutHandle, popupClosedInterval);
+                        reject(new Error('OAuth2 login window was closed.'));
+                    }
+                }
+                catch (_a) {
+                    // Cross-origin error when checking popup.closed - this happens when the popup
+                    // navigates to a third-party OAuth provider with strict security settings.
+                    // We can't detect if the window was closed, so we just rely on the timeout
+                    // and message handlers. Clear the interval to avoid repeated errors.
                     clearInterval(popupClosedInterval);
-                    clearTimeout(timeoutHandle);
-                    reject(new Error('OAuth2 login window was closed.'));
+                    if (config.logsEnabled) {
+                        console.log(`[OAuth2:${providerId}] Cannot check popup.closed due to cross-origin restrictions. ` +
+                            'Relying on message handlers and timeout.');
+                    }
                 }
             }, 1000);
         });

package/dist/esm/oauth2-provider.js.map

@@ -1 +1 @@
-{"version":3,"file":"oauth2-provider.js","sourceRoot":"","sources":["../../src/oauth2-provider.ts"],"names":[],"mappings":";;;;;;;;;;;AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,QAAQ,CAAC;AA0CzC;;;GAGG;AACH,MAAM,OAAO,iBAAkB,SAAQ,eAAe;IAAtD;;QACU,cAAS,GAAsC,IAAI,GAAG,EAAE,CAAC;QAChD,sBAAiB,GAAG,mCAAmC,CAAC;QACxD,iBAAY,GAAG,kCAAkC,CAAC;IA4frE,CAAC;IA1fC;;OAEG;IACH,KAAK,CAAC,mBAAmB,CAAC,OAA6C;;QACrE,KAAK,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3D,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,oBAAoB,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;gBACzE,MAAM,IAAI,KAAK,CAAC,oBAAoB,UAAU,yDAAyD,CAAC,CAAC;YAC3G,CAAC;YAED,MAAM,cAAc,mCACf,MAAM,KACT,YAAY,EAAE,MAAA,MAAM,CAAC,YAAY,mCAAI,MAAM,EAC3C,WAAW,EAAE,MAAA,MAAM,CAAC,WAAW,mCAAI,IAAI,EACvC,KAAK,EAAE,MAAA,MAAM,CAAC,KAAK,mCAAI,EAAE,EACzB,WAAW,EAAE,MAAA,MAAM,CAAC,WAAW,mCAAI,KAAK,GACzC,CAAC;YAEF,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;YAE/C,IAAI,cAAc,CAAC,WAAW,EAAE,CAAC;gBAC/B,OAAO,CAAC,GAAG,CAAC,WAAW,UAAU,4BAA4B,EAAE;oBAC7D,KAAK,EAAE,MAAM,CAAC,KAAK;oBACnB,oBAAoB,EAAE,MAAM,CAAC,oBAAoB;oBACjD,WAAW,EAAE,MAAM,CAAC,WAAW;oBAC/B,YAAY,EAAE,cAAc,CAAC,YAAY;oBACzC,WAAW,EAAE,cAAc,CAAC,WAAW;iBACxC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAEO,WAAW,CAAC,UAAkB;QACpC,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC9C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,oBAAoB,UAAU,4CAA4C,CAAC,CAAC;QAC9F,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,YAAY,CAAC,UAAkB;QACrC,OAAO,GAAG,IAAI,CAAC,iBAAiB,GAAG,UAAU,EAAE,CAAC;IAClD,CAAC;IAED,KAAK,CAAC,KAAK,CACT,OAA2B;;QAE3B,MAAM,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC;QAC/B,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;QAE5C,MAAM,WAAW,GAAG,MAAA,OAAO,CAAC,WAAW,mCAAI,MAAM,CAAC,WAAW,CAAC;QAC9D,MAAM,KAAK,GAAG,MAAA,OAAO,CAAC,KAAK,mCAAI,MAAM,CAAC,KAAK,CAAC;QAC5C,MAAM,KAAK,GAAG,MAAA,OAAO,CAAC,KAAK,mCAAI,IAAI,CAAC,aAAa,EAAE,CAAC;QACpD,MAAM,YAAY,GAAG,MAAA,OAAO,CAAC,YAAY,mCAAI,IAAI,CAAC,oBAAoB,EAAE,CAAC;QAEzE,0BAA0B;QAC1B,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;YACjC,aAAa,EAAE,MAAM,CAAC,YAAY;YAClC,SAAS,EAAE,MAAM,CAAC,KAAK;YACvB,YAAY,EAAE,WAAW;YACzB,KAAK;SACN,CAAC,CAAC;QAEH,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC7B,CAAC;QAED,yBAAyB;QACzB,IAAI,MAAM,CAAC,YAAY,KAAK,MAAM,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;YACzD,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,YAAY,CAAC,CAAC;YACrE,MAAM,CAAC,GAAG,CAAC,gBAAgB,EAAE,aAAa,CAAC,CAAC;YAC5C,MAAM,CAAC,GAAG,CAAC,uBAAuB,EAAE,MAAM,CAAC,CAAC;QAC9C,CAAC;QAED,wCAAwC;QACxC,IAAI,MAAM,CAAC,oBAAoB,EAAE,CAAC;YAChC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,oBAAoB,CAAC,EAAE,CAAC;gBACvE,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YACzB,CAAC;QACH,CAAC;QAED,+CAA+C;QAC/C,IAAI,OAAO,CAAC,oBAAoB,EAAE,CAAC;YACjC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,oBAAoB,CAAC,EAAE,CAAC;gBACxE,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YACzB,CAAC;QACH,CAAC;QAED,4BAA4B;QAC5B,IAAI,CAAC,mBAAmB,CAAC,KAAK,EAAE;YAC9B,UAAU;YACV,YAAY;YACZ,WAAW;YACX,KAAK;SACN,CAAC,CAAC;QAEH,YAAY,CAAC,OAAO,CAAC,eAAe,CAAC,eAAe,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;QAEjH,MAAM,OAAO,GAAG,GAAG,MAAM,CAAC,oBAAoB,IAAI,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;QAEtE,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;YACvB,OAAO,CAAC,GAAG,CAAC,WAAW,UAAU,8BAA8B,EAAE,OAAO,CAAC,CAAC;QAC5E,CAAC;QAED,oBAAoB;QACpB,MAAM,KAAK,GAAG,GAAG,CAAC;QAClB,MAAM,MAAM,GAAG,GAAG,CAAC;QACnB,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,GAAG,CAAC,MAAM,CAAC,UAAU,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;QAC9D,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,GAAG,CAAC,MAAM,CAAC,WAAW,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QAE/D,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CACvB,OAAO,EACP,aAAa,EACb,SAAS,KAAK,WAAW,MAAM,SAAS,IAAI,QAAQ,GAAG,UAAU,CAClE,CAAC;QAEF,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,MAAM,CAAC,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC,CAAC;gBACvE,OAAO;YACT,CAAC;YAED,MAAM,OAAO,GAAG,CACd,cAA6C,EAC7C,aAAqB,EACrB,cAAsB,EACtB,EAAE;gBACF,MAAM,CAAC,mBAAmB,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;gBACtD,YAAY,CAAC,aAAa,CAAC,CAAC;gBAC5B,aAAa,CAAC,cAAc,CAAC,CAAC;YAChC,CAAC,CAAC;YAEF,MAAM,cAAc,GAAG,CAAC,KAAmB,EAAE,EAAE;;gBAC7C,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;oBAC5C,OAAO;gBACT,CAAC;gBACD,IAAI,CAAA,MAAA,KAAK,CAAC,IAAI,0CAAE,IAAI,MAAK,gBAAgB,EAAE,CAAC;oBAC1C,IAAI,CAAA,MAAA,KAAK,CAAC,IAAI,0CAAE,QAAQ,KAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;wBAC7D,OAAO;oBACT,CAAC;oBACD,sCAAsC;oBACtC,IAAI,CAAA,MAAA,KAAK,CAAC,IAAI,0CAAE,UAAU,KAAI,KAAK,CAAC,IAAI,CAAC,UAAU,KAAK,UAAU,EAAE,CAAC;wBACnE,OAAO;oBACT,CAAC;oBACD,OAAO,CAAC,cAAc,EAAE,aAAa,EAAE,mBAAmB,CAAC,CAAC;oBAC5D,6DAA6D;oBAC7D,MAAM,KAIF,KAAK,CAAC,IAGT,EAPK,EACJ,QAAQ,EAAE,gBAAgB,EAC1B,IAAI,EAAE,YAAY,OAKnB,EAJI,OAAO,cAHN,oBAIL,CAGA,CAAC;oBACF,OAAO,CAAC;wBACN,QAAQ,EAAE,QAAa;wBACvB,MAAM,EAAE,OAAiC;qBACS,CAAC,CAAC;gBACxD,CAAC;qBAAM,IAAI,CAAA,MAAA,KAAK,CAAC,IAAI,0CAAE,IAAI,MAAK,aAAa,EAAE,CAAC;oBAC9C,IAAI,CAAA,MAAA,KAAK,CAAC,IAAI,0CAAE,QAAQ,KAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;wBAC7D,OAAO;oBACT,CAAC;oBACD,OAAO,CAAC,cAAc,EAAE,aAAa,EAAE,mBAAmB,CAAC,CAAC;oBAC5D,MAAM,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,6BAA6B,CAAC,CAAC,CAAC;gBACvE,CAAC;YACH,CAAC,CAAC;YAEF,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;YAEnD,MAAM,aAAa,GAAG,MAAM,CAAC,UAAU,CAAC,GAAG,EAAE;gBAC3C,MAAM,CAAC,mBAAmB,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;gBACtD,KAAK,CAAC,KAAK,EAAE,CAAC;gBACd,MAAM,CAAC,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC,CAAC;YAC/C,CAAC,EAAE,MAAM,CAAC,CAAC;YAEX,MAAM,mBAAmB,GAAG,MAAM,CAAC,WAAW,CAAC,GAAG,EAAE;gBAClD,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;oBACjB,MAAM,CAAC,mBAAmB,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;oBACtD,aAAa,CAAC,mBAAmB,CAAC,CAAC;oBACnC,YAAY,CAAC,aAAa,CAAC,CAAC;oBAC5B,MAAM,CAAC,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC,CAAC;gBACvD,CAAC;YACH,CAAC,EAAE,IAAI,CAAC,CAAC;QACX,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,UAAkB;QAC7B,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC9C,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC,CAAC;QAEvD,8CAA8C;QAC9C,IAAI,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,SAAS,EAAE,CAAC;YACtB,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,UAAkB;QACjC,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;QAChD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;QAC/B,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC9C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC,CAAC;QACzD,CAAC;QACD,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;IACjC,CAAC;IAED,KAAK,CAAC,oBAAoB,CAAC,UAAkB;QAC3C,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;QAChD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,sDAAsD,UAAU,IAAI,CAAC,CAAC;QACxF,CAAC;QACD,OAAO;YACL,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,GAAG,EAAE,MAAM,CAAC,OAAO;SACpB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,UAAkB;QAC9B,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;QAChD,IAAI,CAAC,CAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,YAAY,CAAA,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CACb,sDAAsD,UAAU,iDAAiD,CAClH,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;QAC5C,IAAI,CAAC,MAAM,CAAC,mBAAmB,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CAAC,mDAAmD,UAAU,IAAI,CAAC,CAAC;QACrF,CAAC;QAED,MAAM,IAAI,CAAC,uBAAuB,CAAC,UAAU,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC;IACtE,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,GAAQ,EAAE,aAAsB;;QACxD,4CAA4C;QAC5C,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC/C,MAAM,UAAU,GAAG,IAAI,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAE1D,wDAAwD;QACxD,UAAU,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YAChC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACzB,CAAC,CAAC,CAAC;QAEH,MAAM,YAAY,GAAG,aAAa,aAAb,aAAa,cAAb,aAAa,GAAI,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC1D,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,mBAAmB,CAAC,YAAY,CAAC,CAAC;QACvD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,YAAY,CAAC,UAAU,CAAC,eAAe,CAAC,eAAe,CAAC,CAAC;YACzD,OAAO,EAAE,KAAK,EAAE,iDAAiD,EAAE,CAAC;QACtE,CAAC;QAED,MAAM,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC;QAC/B,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC9C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,YAAY,CAAC,UAAU,CAAC,eAAe,CAAC,eAAe,CAAC,CAAC;YACzD,OAAO,EAAE,KAAK,EAAE,oBAAoB,UAAU,4BAA4B,EAAE,CAAC;QAC/E,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAClC,IAAI,KAAK,EAAE,CAAC;YACV,YAAY,CAAC,UAAU,CAAC,eAAe,CAAC,eAAe,CAAC,CAAC;YACzD,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,KAAK,EAAE,CAAC;QAC7D,CAAC;QAED,IAAI,CAAC;YACH,IAAI,aAAkC,CAAC;YAEvC,sBAAsB;YACtB,IAAI,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;gBACvB,0BAA0B;gBAC1B,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;gBAChC,IAAI,CAAC,IAAI,EAAE,CAAC;oBACV,YAAY,CAAC,UAAU,CAAC,eAAe,CAAC,eAAe,CAAC,CAAC;oBACzD,OAAO,EAAE,KAAK,EAAE,kDAAkD,EAAE,CAAC;gBACvE,CAAC;gBACD,aAAa,GAAG,MAAM,IAAI,CAAC,yBAAyB,CAAC,UAAU,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;YAClF,CAAC;iBAAM,IAAI,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;gBACtC,gBAAgB;gBAChB,aAAa,GAAG;oBACd,YAAY,EAAE,MAAM,CAAC,GAAG,CAAC,cAAc,CAAE;oBACzC,UAAU,EAAE,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,QAAQ;oBAChD,UAAU,EAAE,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,YAAY,CAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;oBAC1F,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,SAAS;oBACvC,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,SAAS;iBAC9C,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,YAAY,CAAC,UAAU,CAAC,eAAe,CAAC,eAAe,CAAC,CAAC;gBACzD,OAAO,EAAE,KAAK,EAAE,oDAAoD,EAAE,CAAC;YACzE,CAAC;YAED,MAAM,SAAS,GAAG,aAAa,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,aAAa,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC;YACjH,MAAM,UAAU,GAAG,MAAA,MAAA,aAAa,CAAC,KAAK,0CAAE,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,OAAO,CAAC,mCAAI,EAAE,CAAC;YAEzE,oCAAoC;YACpC,IAAI,YAAY,GAAmC,IAAI,CAAC;YACxD,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;gBACvB,YAAY,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,UAAU,EAAE,aAAa,CAAC,YAAY,CAAC,CAAC;YAClF,CAAC;YAED,IAAI,CAAC,aAAa,CAAC,UAAU,EAAE;gBAC7B,WAAW,EAAE,aAAa,CAAC,YAAY;gBACvC,YAAY,EAAE,aAAa,CAAC,aAAa;gBACzC,OAAO,EAAE,aAAa,CAAC,QAAQ;gBAC/B,SAAS;gBACT,KAAK,EAAE,UAAU;gBACjB,SAAS,EAAE,aAAa,CAAC,UAAU;aACpC,CAAC,CAAC;YAEH,OAAO;gBACL,QAAQ,EAAE,QAAQ;gBAClB,MAAM,EAAE;oBACN,UAAU;oBACV,WAAW,EAAE;wBACX,KAAK,EAAE,aAAa,CAAC,YAAY;wBACjC,SAAS,EAAE,aAAa,CAAC,UAAU;wBACnC,OAAO,EAAE,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE;wBAC1C,YAAY,EAAE,aAAa,CAAC,aAAa;qBAC1C;oBACD,OAAO,EAAE,MAAA,aAAa,CAAC,QAAQ,mCAAI,IAAI;oBACvC,YAAY,EAAE,MAAA,aAAa,CAAC,aAAa,mCAAI,IAAI;oBACjD,YAAY;oBACZ,KAAK,EAAE,UAAU;oBACjB,SAAS,EAAE,aAAa,CAAC,UAAU;oBACnC,SAAS,EAAE,MAAA,aAAa,CAAC,UAAU,mCAAI,IAAI;iBAC5C;aACF,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,KAAK,EAAE,CAAC;gBACzB,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC;YAChC,CAAC;YACD,OAAO,EAAE,KAAK,EAAE,mCAAmC,EAAE,CAAC;QACxD,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,UAAU,CAAC,eAAe,CAAC,eAAe,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,yBAAyB,CACrC,UAAkB,EAClB,IAAY,EACZ,OAA2B;QAE3B,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;QAC5C,IAAI,CAAC,MAAM,CAAC,mBAAmB,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CAAC,mDAAmD,UAAU,IAAI,CAAC,CAAC;QACrF,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;YACjC,UAAU,EAAE,oBAAoB;YAChC,SAAS,EAAE,MAAM,CAAC,KAAK;YACvB,IAAI;YACJ,YAAY,EAAE,OAAO,CAAC,WAAW;SAClC,CAAC,CAAC;QAEH,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;YACvB,MAAM,CAAC,GAAG,CAAC,eAAe,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;QACpD,CAAC;QAED,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;YACvB,OAAO,CAAC,GAAG,CAAC,WAAW,UAAU,uBAAuB,EAAE,MAAM,CAAC,mBAAmB,CAAC,CAAC;QACxF,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,mBAAmB,EAAE;YACvD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,mCAAmC;aACpD;YACD,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE;SACxB,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,iCAAiC,QAAQ,CAAC,MAAM,MAAM,IAAI,EAAE,CAAC,CAAC;QAChF,CAAC;QAED,OAAO,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAwB,CAAC;IACxD,CAAC;IAEO,KAAK,CAAC,uBAAuB,CAAC,UAAkB,EAAE,YAAoB;;QAC5E,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;QAC5C,IAAI,CAAC,MAAM,CAAC,mBAAmB,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CAAC,mDAAmD,UAAU,IAAI,CAAC,CAAC;QACrF,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;YACjC,UAAU,EAAE,eAAe;YAC3B,aAAa,EAAE,YAAY;YAC3B,SAAS,EAAE,MAAM,CAAC,KAAK;SACxB,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,mBAAmB,EAAE;YACvD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,mCAAmC;aACpD;YACD,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE;SACxB,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,0BAA0B,QAAQ,CAAC,MAAM,MAAM,IAAI,EAAE,CAAC,CAAC;QACzE,CAAC;QAED,MAAM,MAAM,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAwB,CAAC;QAC9D,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC;QACnG,MAAM,UAAU,GAAG,MAAA,MAAA,MAAM,CAAC,KAAK,0CAAE,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,OAAO,CAAC,mCAAI,EAAE,CAAC;QAElE,IAAI,CAAC,aAAa,CAAC,UAAU,EAAE;YAC7B,WAAW,EAAE,MAAM,CAAC,YAAY;YAChC,YAAY,EAAE,MAAA,MAAM,CAAC,aAAa,mCAAI,YAAY;YAClD,OAAO,EAAE,MAAM,CAAC,QAAQ;YACxB,SAAS;YACT,KAAK,EAAE,UAAU;YACjB,SAAS,EAAE,MAAM,CAAC,UAAU;SAC7B,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,aAAa,CAAC,UAAkB,EAAE,WAAmB;QACjE,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;QAC5C,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,2CAA2C,UAAU,IAAI,CAAC,CAAC;QAC7E,CAAC;QAED,MAAM,OAAO,GAA2B;YACtC,aAAa,EAAE,UAAU,WAAW,EAAE;SACvC,CAAC;QAEF,IAAI,MAAM,CAAC,yBAAyB,EAAE,CAAC;YACrC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,yBAAyB,CAAC,CAAC;QAC3D,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE;YAC/C,OAAO;SACR,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,oCAAoC,QAAQ,CAAC,MAAM,MAAM,IAAI,EAAE,CAAC,CAAC;QACnF,CAAC;QAED,OAAO,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA4B,CAAC;IAC5D,CAAC;IAEO,aAAa,CAAC,UAAkB,EAAE,MAA0B;QAClE,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;IAC9E,CAAC;IAEO,eAAe,CAAC,UAAkB;QACxC,MAAM,GAAG,GAAG,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC,CAAC;QAChE,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAuB,CAAC;QAC/C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CAAC,sDAAsD,UAAU,GAAG,EAAE,GAAG,CAAC,CAAC;YACvF,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAEO,mBAAmB,CAAC,KAAa,EAAE,OAA2B;QACpE,YAAY,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,YAAY,GAAG,KAAK,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IAChF,CAAC;IAEO,mBAAmB,CAAC,KAAa;QACvC,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,YAAY,GAAG,KAAK,EAAE,CAAC;QAC3C,MAAM,GAAG,GAAG,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACtC,YAAY,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAuB,CAAC;QAC/C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CAAC,8CAA8C,EAAE,GAAG,CAAC,CAAC;YAClE,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAEO,aAAa;QACnB,OAAO,CAAC,GAAG,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC9G,CAAC;IAEO,oBAAoB;QAC1B,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;QACjC,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QAC9B,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC;aACrB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,oEAAoE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;aACxF,IAAI,CAAC,EAAE,CAAC,CAAC;IACd,CAAC;IAEO,KAAK,CAAC,qBAAqB,CAAC,YAAoB;QACtD,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;QAClC,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QAC1C,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAC3D,OAAO,IAAI,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;IACtD,CAAC;IAEO,eAAe,CAAC,MAAkB;QACxC,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,IAAI,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1D,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACjF,CAAC;CACF","sourcesContent":["import { BaseSocialLogin } from './base';\nimport type {\n  AuthorizationCode,\n  LoginResult,\n  OAuth2LoginOptions,\n  OAuth2LoginResponse,\n  OAuth2ProviderConfig,\n  ProviderResponseMap,\n} from './definitions';\n\ninterface OAuth2TokenResponse {\n  token_type: string;\n  expires_in?: number;\n  access_token: string;\n  scope?: string;\n  refresh_token?: string;\n  id_token?: string;\n}\n\ninterface OAuth2PendingLogin {\n  providerId: string;\n  codeVerifier: string;\n  redirectUri: string;\n  scope: string;\n}\n\ninterface OAuth2StoredTokens {\n  accessToken: string;\n  refreshToken?: string;\n  idToken?: string;\n  expiresAt: number;\n  scope: string[];\n  tokenType: string;\n}\n\ninterface OAuth2ConfigInternal extends OAuth2ProviderConfig {\n  responseType: 'code' | 'token';\n  pkceEnabled: boolean;\n  scope: string;\n  logsEnabled: boolean;\n}\n\n/**\n * OAuth2 Social Login Manager\n * Supports multiple OAuth2 provider configurations\n */\nexport class OAuth2SocialLogin extends BaseSocialLogin {\n  private providers: Map<string, OAuth2ConfigInternal> = new Map();\n  private readonly TOKENS_KEY_PREFIX = 'capgo_social_login_oauth2_tokens_';\n  private readonly STATE_PREFIX = 'capgo_social_login_oauth2_state_';\n\n  /**\n   * Initialize multiple OAuth2 providers\n   */\n  async initializeProviders(configs: Record<string, OAuth2ProviderConfig>): Promise<void> {\n    for (const [providerId, config] of Object.entries(configs)) {\n      if (!config.appId || !config.authorizationBaseUrl || !config.redirectUrl) {\n        throw new Error(`OAuth2 provider '${providerId}' requires appId, authorizationBaseUrl, and redirectUrl`);\n      }\n\n      const internalConfig: OAuth2ConfigInternal = {\n        ...config,\n        responseType: config.responseType ?? 'code',\n        pkceEnabled: config.pkceEnabled ?? true,\n        scope: config.scope ?? '',\n        logsEnabled: config.logsEnabled ?? false,\n      };\n\n      this.providers.set(providerId, internalConfig);\n\n      if (internalConfig.logsEnabled) {\n        console.log(`[OAuth2:${providerId}] Initialized with config:`, {\n          appId: config.appId,\n          authorizationBaseUrl: config.authorizationBaseUrl,\n          redirectUrl: config.redirectUrl,\n          responseType: internalConfig.responseType,\n          pkceEnabled: internalConfig.pkceEnabled,\n        });\n      }\n    }\n  }\n\n  private getProvider(providerId: string): OAuth2ConfigInternal {\n    const config = this.providers.get(providerId);\n    if (!config) {\n      throw new Error(`OAuth2 provider '${providerId}' not configured. Call initialize() first.`);\n    }\n    return config;\n  }\n\n  private getTokensKey(providerId: string): string {\n    return `${this.TOKENS_KEY_PREFIX}${providerId}`;\n  }\n\n  async login<T extends 'oauth2'>(\n    options: OAuth2LoginOptions,\n  ): Promise<{ provider: T; result: ProviderResponseMap[T] }> {\n    const { providerId } = options;\n    const config = this.getProvider(providerId);\n\n    const redirectUri = options.redirectUrl ?? config.redirectUrl;\n    const scope = options.scope ?? config.scope;\n    const state = options.state ?? this.generateState();\n    const codeVerifier = options.codeVerifier ?? this.generateCodeVerifier();\n\n    // Build authorization URL\n    const params = new URLSearchParams({\n      response_type: config.responseType,\n      client_id: config.appId,\n      redirect_uri: redirectUri,\n      state,\n    });\n\n    if (scope) {\n      params.set('scope', scope);\n    }\n\n    // Add PKCE for code flow\n    if (config.responseType === 'code' && config.pkceEnabled) {\n      const codeChallenge = await this.generateCodeChallenge(codeVerifier);\n      params.set('code_challenge', codeChallenge);\n      params.set('code_challenge_method', 'S256');\n    }\n\n    // Add additional parameters from config\n    if (config.additionalParameters) {\n      for (const [key, value] of Object.entries(config.additionalParameters)) {\n        params.set(key, value);\n      }\n    }\n\n    // Add additional parameters from login options\n    if (options.additionalParameters) {\n      for (const [key, value] of Object.entries(options.additionalParameters)) {\n        params.set(key, value);\n      }\n    }\n\n    // Store pending login state\n    this.persistPendingLogin(state, {\n      providerId,\n      codeVerifier,\n      redirectUri,\n      scope,\n    });\n\n    localStorage.setItem(BaseSocialLogin.OAUTH_STATE_KEY, JSON.stringify({ provider: 'oauth2', providerId, state }));\n\n    const authUrl = `${config.authorizationBaseUrl}?${params.toString()}`;\n\n    if (config.logsEnabled) {\n      console.log(`[OAuth2:${providerId}] Opening authorization URL:`, authUrl);\n    }\n\n    // Open popup window\n    const width = 500;\n    const height = 650;\n    const left = window.screenX + (window.outerWidth - width) / 2;\n    const top = window.screenY + (window.outerHeight - height) / 2;\n\n    const popup = window.open(\n      authUrl,\n      'OAuth2Login',\n      `width=${width},height=${height},left=${left},top=${top},popup=1`,\n    );\n\n    return new Promise((resolve, reject) => {\n      if (!popup) {\n        reject(new Error('Unable to open login window. Please allow popups.'));\n        return;\n      }\n\n      const cleanup = (\n        messageHandler: (event: MessageEvent) => void,\n        timeoutHandle: number,\n        intervalHandle: number,\n      ) => {\n        window.removeEventListener('message', messageHandler);\n        clearTimeout(timeoutHandle);\n        clearInterval(intervalHandle);\n      };\n\n      const messageHandler = (event: MessageEvent) => {\n        if (event.origin !== window.location.origin) {\n          return;\n        }\n        if (event.data?.type === 'oauth-response') {\n          if (event.data?.provider && event.data.provider !== 'oauth2') {\n            return;\n          }\n          // Check providerId matches if present\n          if (event.data?.providerId && event.data.providerId !== providerId) {\n            return;\n          }\n          cleanup(messageHandler, timeoutHandle, popupClosedInterval);\n          // eslint-disable-next-line @typescript-eslint/no-unused-vars\n          const {\n            provider: _ignoredProvider,\n            type: _ignoredType,\n            ...payload\n          } = event.data as OAuth2LoginResponse & {\n            provider?: string;\n            type?: string;\n          };\n          resolve({\n            provider: 'oauth2' as T,\n            result: payload as ProviderResponseMap[T],\n          } as { provider: T; result: ProviderResponseMap[T] });\n        } else if (event.data?.type === 'oauth-error') {\n          if (event.data?.provider && event.data.provider !== 'oauth2') {\n            return;\n          }\n          cleanup(messageHandler, timeoutHandle, popupClosedInterval);\n          reject(new Error(event.data.error || 'OAuth2 login was cancelled.'));\n        }\n      };\n\n      window.addEventListener('message', messageHandler);\n\n      const timeoutHandle = window.setTimeout(() => {\n        window.removeEventListener('message', messageHandler);\n        popup.close();\n        reject(new Error('OAuth2 login timed out.'));\n      }, 300000);\n\n      const popupClosedInterval = window.setInterval(() => {\n        if (popup.closed) {\n          window.removeEventListener('message', messageHandler);\n          clearInterval(popupClosedInterval);\n          clearTimeout(timeoutHandle);\n          reject(new Error('OAuth2 login window was closed.'));\n        }\n      }, 1000);\n    });\n  }\n\n  async logout(providerId: string): Promise<void> {\n    const config = this.providers.get(providerId);\n    localStorage.removeItem(this.getTokensKey(providerId));\n\n    // If logout URL is configured, redirect to it\n    if (config?.logoutUrl) {\n      window.open(config.logoutUrl, '_blank');\n    }\n  }\n\n  async isLoggedIn(providerId: string): Promise<{ isLoggedIn: boolean }> {\n    const tokens = this.getStoredTokens(providerId);\n    if (!tokens) {\n      return { isLoggedIn: false };\n    }\n    const isValid = tokens.expiresAt > Date.now();\n    if (!isValid) {\n      localStorage.removeItem(this.getTokensKey(providerId));\n    }\n    return { isLoggedIn: isValid };\n  }\n\n  async getAuthorizationCode(providerId: string): Promise<AuthorizationCode> {\n    const tokens = this.getStoredTokens(providerId);\n    if (!tokens) {\n      throw new Error(`OAuth2 access token is not available for provider '${providerId}'.`);\n    }\n    return {\n      accessToken: tokens.accessToken,\n      jwt: tokens.idToken,\n    };\n  }\n\n  async refresh(providerId: string): Promise<void> {\n    const tokens = this.getStoredTokens(providerId);\n    if (!tokens?.refreshToken) {\n      throw new Error(\n        `No OAuth2 refresh token is available for provider '${providerId}'. Include offline_access scope to receive one.`,\n      );\n    }\n\n    const config = this.getProvider(providerId);\n    if (!config.accessTokenEndpoint) {\n      throw new Error(`No accessTokenEndpoint configured for provider '${providerId}'.`);\n    }\n\n    await this.refreshWithRefreshToken(providerId, tokens.refreshToken);\n  }\n\n  async handleOAuthRedirect(url: URL, expectedState?: string): Promise<LoginResult | { error: string } | null> {\n    // Check both query params and hash fragment\n    const params = new URLSearchParams(url.search);\n    const hashParams = new URLSearchParams(url.hash.slice(1));\n\n    // Merge params, hash takes priority (for implicit flow)\n    hashParams.forEach((value, key) => {\n      params.set(key, value);\n    });\n\n    const stateFromUrl = expectedState ?? params.get('state');\n    if (!stateFromUrl) {\n      return null;\n    }\n\n    const pending = this.consumePendingLogin(stateFromUrl);\n    if (!pending) {\n      localStorage.removeItem(BaseSocialLogin.OAUTH_STATE_KEY);\n      return { error: 'OAuth2 login session expired or state mismatch.' };\n    }\n\n    const { providerId } = pending;\n    const config = this.providers.get(providerId);\n    if (!config) {\n      localStorage.removeItem(BaseSocialLogin.OAUTH_STATE_KEY);\n      return { error: `OAuth2 provider '${providerId}' configuration not found.` };\n    }\n\n    const error = params.get('error');\n    if (error) {\n      localStorage.removeItem(BaseSocialLogin.OAUTH_STATE_KEY);\n      return { error: params.get('error_description') || error };\n    }\n\n    try {\n      let tokenResponse: OAuth2TokenResponse;\n\n      // Check response type\n      if (params.has('code')) {\n        // Authorization code flow\n        const code = params.get('code');\n        if (!code) {\n          localStorage.removeItem(BaseSocialLogin.OAUTH_STATE_KEY);\n          return { error: 'OAuth2 authorization code missing from redirect.' };\n        }\n        tokenResponse = await this.exchangeAuthorizationCode(providerId, code, pending);\n      } else if (params.has('access_token')) {\n        // Implicit flow\n        tokenResponse = {\n          access_token: params.get('access_token')!,\n          token_type: params.get('token_type') || 'bearer',\n          expires_in: params.has('expires_in') ? parseInt(params.get('expires_in')!, 10) : undefined,\n          scope: params.get('scope') || undefined,\n          id_token: params.get('id_token') || undefined,\n        };\n      } else {\n        localStorage.removeItem(BaseSocialLogin.OAUTH_STATE_KEY);\n        return { error: 'No authorization code or access token in redirect.' };\n      }\n\n      const expiresAt = tokenResponse.expires_in ? Date.now() + tokenResponse.expires_in * 1000 : Date.now() + 3600000;\n      const scopeArray = tokenResponse.scope?.split(' ').filter(Boolean) ?? [];\n\n      // Fetch resource data if configured\n      let resourceData: Record<string, unknown> | null = null;\n      if (config.resourceUrl) {\n        resourceData = await this.fetchResource(providerId, tokenResponse.access_token);\n      }\n\n      this.persistTokens(providerId, {\n        accessToken: tokenResponse.access_token,\n        refreshToken: tokenResponse.refresh_token,\n        idToken: tokenResponse.id_token,\n        expiresAt,\n        scope: scopeArray,\n        tokenType: tokenResponse.token_type,\n      });\n\n      return {\n        provider: 'oauth2',\n        result: {\n          providerId,\n          accessToken: {\n            token: tokenResponse.access_token,\n            tokenType: tokenResponse.token_type,\n            expires: new Date(expiresAt).toISOString(),\n            refreshToken: tokenResponse.refresh_token,\n          },\n          idToken: tokenResponse.id_token ?? null,\n          refreshToken: tokenResponse.refresh_token ?? null,\n          resourceData,\n          scope: scopeArray,\n          tokenType: tokenResponse.token_type,\n          expiresIn: tokenResponse.expires_in ?? null,\n        },\n      };\n    } catch (err) {\n      if (err instanceof Error) {\n        return { error: err.message };\n      }\n      return { error: 'OAuth2 login failed unexpectedly.' };\n    } finally {\n      localStorage.removeItem(BaseSocialLogin.OAUTH_STATE_KEY);\n    }\n  }\n\n  private async exchangeAuthorizationCode(\n    providerId: string,\n    code: string,\n    pending: OAuth2PendingLogin,\n  ): Promise<OAuth2TokenResponse> {\n    const config = this.getProvider(providerId);\n    if (!config.accessTokenEndpoint) {\n      throw new Error(`No accessTokenEndpoint configured for provider '${providerId}'.`);\n    }\n\n    const params = new URLSearchParams({\n      grant_type: 'authorization_code',\n      client_id: config.appId,\n      code,\n      redirect_uri: pending.redirectUri,\n    });\n\n    if (config.pkceEnabled) {\n      params.set('code_verifier', pending.codeVerifier);\n    }\n\n    if (config.logsEnabled) {\n      console.log(`[OAuth2:${providerId}] Exchanging code at:`, config.accessTokenEndpoint);\n    }\n\n    const response = await fetch(config.accessTokenEndpoint, {\n      method: 'POST',\n      headers: {\n        'Content-Type': 'application/x-www-form-urlencoded',\n      },\n      body: params.toString(),\n    });\n\n    if (!response.ok) {\n      const text = await response.text();\n      throw new Error(`OAuth2 token exchange failed (${response.status}): ${text}`);\n    }\n\n    return (await response.json()) as OAuth2TokenResponse;\n  }\n\n  private async refreshWithRefreshToken(providerId: string, refreshToken: string): Promise<void> {\n    const config = this.getProvider(providerId);\n    if (!config.accessTokenEndpoint) {\n      throw new Error(`No accessTokenEndpoint configured for provider '${providerId}'.`);\n    }\n\n    const params = new URLSearchParams({\n      grant_type: 'refresh_token',\n      refresh_token: refreshToken,\n      client_id: config.appId,\n    });\n\n    const response = await fetch(config.accessTokenEndpoint, {\n      method: 'POST',\n      headers: {\n        'Content-Type': 'application/x-www-form-urlencoded',\n      },\n      body: params.toString(),\n    });\n\n    if (!response.ok) {\n      const text = await response.text();\n      throw new Error(`OAuth2 refresh failed (${response.status}): ${text}`);\n    }\n\n    const tokens = (await response.json()) as OAuth2TokenResponse;\n    const expiresAt = tokens.expires_in ? Date.now() + tokens.expires_in * 1000 : Date.now() + 3600000;\n    const scopeArray = tokens.scope?.split(' ').filter(Boolean) ?? [];\n\n    this.persistTokens(providerId, {\n      accessToken: tokens.access_token,\n      refreshToken: tokens.refresh_token ?? refreshToken,\n      idToken: tokens.id_token,\n      expiresAt,\n      scope: scopeArray,\n      tokenType: tokens.token_type,\n    });\n  }\n\n  private async fetchResource(providerId: string, accessToken: string): Promise<Record<string, unknown>> {\n    const config = this.getProvider(providerId);\n    if (!config.resourceUrl) {\n      throw new Error(`No resourceUrl configured for provider '${providerId}'.`);\n    }\n\n    const headers: Record<string, string> = {\n      Authorization: `Bearer ${accessToken}`,\n    };\n\n    if (config.additionalResourceHeaders) {\n      Object.assign(headers, config.additionalResourceHeaders);\n    }\n\n    const response = await fetch(config.resourceUrl, {\n      headers,\n    });\n\n    if (!response.ok) {\n      const text = await response.text();\n      throw new Error(`Unable to fetch OAuth2 resource (${response.status}): ${text}`);\n    }\n\n    return (await response.json()) as Record<string, unknown>;\n  }\n\n  private persistTokens(providerId: string, tokens: OAuth2StoredTokens): void {\n    localStorage.setItem(this.getTokensKey(providerId), JSON.stringify(tokens));\n  }\n\n  private getStoredTokens(providerId: string): OAuth2StoredTokens | null {\n    const raw = localStorage.getItem(this.getTokensKey(providerId));\n    if (!raw) {\n      return null;\n    }\n    try {\n      return JSON.parse(raw) as OAuth2StoredTokens;\n    } catch (err) {\n      console.warn(`Failed to parse stored OAuth2 tokens for provider '${providerId}'`, err);\n      return null;\n    }\n  }\n\n  private persistPendingLogin(state: string, payload: OAuth2PendingLogin): void {\n    localStorage.setItem(`${this.STATE_PREFIX}${state}`, JSON.stringify(payload));\n  }\n\n  private consumePendingLogin(state: string): OAuth2PendingLogin | null {\n    const key = `${this.STATE_PREFIX}${state}`;\n    const raw = localStorage.getItem(key);\n    localStorage.removeItem(key);\n    if (!raw) {\n      return null;\n    }\n    try {\n      return JSON.parse(raw) as OAuth2PendingLogin;\n    } catch (err) {\n      console.warn('Failed to parse pending OAuth2 login payload', err);\n      return null;\n    }\n  }\n\n  private generateState(): string {\n    return [...crypto.getRandomValues(new Uint8Array(16))].map((b) => b.toString(16).padStart(2, '0')).join('');\n  }\n\n  private generateCodeVerifier(): string {\n    const array = new Uint8Array(64);\n    crypto.getRandomValues(array);\n    return Array.from(array)\n      .map((b) => 'abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789-._~'[b % 66])\n      .join('');\n  }\n\n  private async generateCodeChallenge(codeVerifier: string): Promise<string> {\n    const encoder = new TextEncoder();\n    const data = encoder.encode(codeVerifier);\n    const digest = await crypto.subtle.digest('SHA-256', data);\n    return this.base64UrlEncode(new Uint8Array(digest));\n  }\n\n  private base64UrlEncode(buffer: Uint8Array): string {\n    let binary = '';\n    buffer.forEach((b) => (binary += String.fromCharCode(b)));\n    return btoa(binary).replace(/\\+/g, '-').replace(/\\//g, '_').replace(/=+$/, '');\n  }\n}\n"]}
+{"version":3,"file":"oauth2-provider.js","sourceRoot":"","sources":["../../src/oauth2-provider.ts"],"names":[],"mappings":";;;;;;;;;;;AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,QAAQ,CAAC;AA0CzC;;;GAGG;AACH,MAAM,OAAO,iBAAkB,SAAQ,eAAe;IAAtD;;QACU,cAAS,GAAsC,IAAI,GAAG,EAAE,CAAC;QAChD,sBAAiB,GAAG,mCAAmC,CAAC;QACxD,iBAAY,GAAG,kCAAkC,CAAC;IA2iBrE,CAAC;IAziBC;;OAEG;IACH,KAAK,CAAC,mBAAmB,CAAC,OAA6C;;QACrE,KAAK,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3D,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,oBAAoB,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;gBACzE,MAAM,IAAI,KAAK,CAAC,oBAAoB,UAAU,yDAAyD,CAAC,CAAC;YAC3G,CAAC;YAED,MAAM,cAAc,mCACf,MAAM,KACT,YAAY,EAAE,MAAA,MAAM,CAAC,YAAY,mCAAI,MAAM,EAC3C,WAAW,EAAE,MAAA,MAAM,CAAC,WAAW,mCAAI,IAAI,EACvC,KAAK,EAAE,MAAA,MAAM,CAAC,KAAK,mCAAI,EAAE,EACzB,WAAW,EAAE,MAAA,MAAM,CAAC,WAAW,mCAAI,KAAK,GACzC,CAAC;YAEF,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;YAE/C,IAAI,cAAc,CAAC,WAAW,EAAE,CAAC;gBAC/B,OAAO,CAAC,GAAG,CAAC,WAAW,UAAU,4BAA4B,EAAE;oBAC7D,KAAK,EAAE,MAAM,CAAC,KAAK;oBACnB,oBAAoB,EAAE,MAAM,CAAC,oBAAoB;oBACjD,WAAW,EAAE,MAAM,CAAC,WAAW;oBAC/B,YAAY,EAAE,cAAc,CAAC,YAAY;oBACzC,WAAW,EAAE,cAAc,CAAC,WAAW;iBACxC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IAEO,WAAW,CAAC,UAAkB;QACpC,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC9C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,oBAAoB,UAAU,4CAA4C,CAAC,CAAC;QAC9F,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,YAAY,CAAC,UAAkB;QACrC,OAAO,GAAG,IAAI,CAAC,iBAAiB,GAAG,UAAU,EAAE,CAAC;IAClD,CAAC;IAED,KAAK,CAAC,KAAK,CACT,OAA2B;;QAE3B,MAAM,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC;QAC/B,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;QAE5C,MAAM,WAAW,GAAG,MAAA,OAAO,CAAC,WAAW,mCAAI,MAAM,CAAC,WAAW,CAAC;QAC9D,MAAM,KAAK,GAAG,MAAA,OAAO,CAAC,KAAK,mCAAI,MAAM,CAAC,KAAK,CAAC;QAC5C,MAAM,KAAK,GAAG,MAAA,OAAO,CAAC,KAAK,mCAAI,IAAI,CAAC,aAAa,EAAE,CAAC;QACpD,MAAM,YAAY,GAAG,MAAA,OAAO,CAAC,YAAY,mCAAI,IAAI,CAAC,oBAAoB,EAAE,CAAC;QAEzE,0BAA0B;QAC1B,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;YACjC,aAAa,EAAE,MAAM,CAAC,YAAY;YAClC,SAAS,EAAE,MAAM,CAAC,KAAK;YACvB,YAAY,EAAE,WAAW;YACzB,KAAK;SACN,CAAC,CAAC;QAEH,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC7B,CAAC;QAED,yBAAyB;QACzB,IAAI,MAAM,CAAC,YAAY,KAAK,MAAM,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;YACzD,MAAM,aAAa,GAAG,MAAM,IAAI,CAAC,qBAAqB,CAAC,YAAY,CAAC,CAAC;YACrE,MAAM,CAAC,GAAG,CAAC,gBAAgB,EAAE,aAAa,CAAC,CAAC;YAC5C,MAAM,CAAC,GAAG,CAAC,uBAAuB,EAAE,MAAM,CAAC,CAAC;QAC9C,CAAC;QAED,wCAAwC;QACxC,IAAI,MAAM,CAAC,oBAAoB,EAAE,CAAC;YAChC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,oBAAoB,CAAC,EAAE,CAAC;gBACvE,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YACzB,CAAC;QACH,CAAC;QAED,+CAA+C;QAC/C,IAAI,OAAO,CAAC,oBAAoB,EAAE,CAAC;YACjC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,oBAAoB,CAAC,EAAE,CAAC;gBACxE,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YACzB,CAAC;QACH,CAAC;QAED,4BAA4B;QAC5B,IAAI,CAAC,mBAAmB,CAAC,KAAK,EAAE;YAC9B,UAAU;YACV,YAAY;YACZ,WAAW;YACX,KAAK;SACN,CAAC,CAAC;QAEH,YAAY,CAAC,OAAO,CAAC,eAAe,CAAC,eAAe,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;QAEjH,MAAM,OAAO,GAAG,GAAG,MAAM,CAAC,oBAAoB,IAAI,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC;QAEtE,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;YACvB,OAAO,CAAC,GAAG,CAAC,WAAW,UAAU,8BAA8B,EAAE,OAAO,CAAC,CAAC;QAC5E,CAAC;QAED,oBAAoB;QACpB,MAAM,KAAK,GAAG,GAAG,CAAC;QAClB,MAAM,MAAM,GAAG,GAAG,CAAC;QACnB,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,GAAG,CAAC,MAAM,CAAC,UAAU,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC;QAC9D,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,GAAG,CAAC,MAAM,CAAC,WAAW,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QAE/D,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CACvB,OAAO,EACP,aAAa,EACb,SAAS,KAAK,WAAW,MAAM,SAAS,IAAI,QAAQ,GAAG,UAAU,CAClE,CAAC;QAEF,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,MAAM,CAAC,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC,CAAC;gBACvE,OAAO;YACT,CAAC;YAED,uFAAuF;YACvF,MAAM,WAAW,GAAG,UAAU,KAAK,EAAE,CAAC;YACtC,IAAI,gBAAgB,GAA4B,IAAI,CAAC;YAErD,IAAI,CAAC;gBACH,gBAAgB,GAAG,IAAI,gBAAgB,CAAC,WAAW,CAAC,CAAC;YACvD,CAAC;YAAC,WAAM,CAAC;gBACP,gEAAgE;gBAChE,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;oBACvB,OAAO,CAAC,GAAG,CAAC,WAAW,UAAU,0DAA0D,CAAC,CAAC;gBAC/F,CAAC;YACH,CAAC;YAED,MAAM,OAAO,GAAG,CACd,cAA6C,EAC7C,aAAqB,EACrB,cAAsB,EACtB,EAAE;gBACF,MAAM,CAAC,mBAAmB,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;gBACtD,YAAY,CAAC,aAAa,CAAC,CAAC;gBAC5B,aAAa,CAAC,cAAc,CAAC,CAAC;gBAC9B,IAAI,gBAAgB,EAAE,CAAC;oBACrB,gBAAgB,CAAC,KAAK,EAAE,CAAC;gBAC3B,CAAC;YACH,CAAC,CAAC;YAEF,MAAM,kBAAkB,GAAG,CAAC,IAA6B,EAAE,EAAE;gBAC3D,IAAI,CAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,IAAI,MAAK,gBAAgB,EAAE,CAAC;oBACpC,IAAI,CAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,QAAQ,KAAI,IAAI,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;wBACjD,OAAO,KAAK,CAAC;oBACf,CAAC;oBACD,sCAAsC;oBACtC,IAAI,CAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,UAAU,KAAI,IAAI,CAAC,UAAU,KAAK,UAAU,EAAE,CAAC;wBACvD,OAAO,KAAK,CAAC;oBACf,CAAC;oBACD,OAAO,CAAC,cAAc,EAAE,aAAa,EAAE,mBAAmB,CAAC,CAAC;oBAC5D,6DAA6D;oBAC7D,MAAM,KAIF,IAGH,EAPK,EACJ,QAAQ,EAAE,gBAAgB,EAC1B,IAAI,EAAE,YAAY,OAKnB,EAJI,OAAO,cAHN,oBAIL,CAGA,CAAC;oBACF,OAAO,CAAC;wBACN,QAAQ,EAAE,QAAa;wBACvB,MAAM,EAAE,OAAiC;qBACS,CAAC,CAAC;oBACtD,OAAO,IAAI,CAAC;gBACd,CAAC;qBAAM,IAAI,CAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,IAAI,MAAK,aAAa,EAAE,CAAC;oBACxC,IAAI,CAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,QAAQ,KAAI,IAAI,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;wBACjD,OAAO,KAAK,CAAC;oBACf,CAAC;oBACD,OAAO,CAAC,cAAc,EAAE,aAAa,EAAE,mBAAmB,CAAC,CAAC;oBAC5D,MAAM,CAAC,IAAI,KAAK,CAAE,IAAI,CAAC,KAAgB,IAAI,6BAA6B,CAAC,CAAC,CAAC;oBAC3E,OAAO,IAAI,CAAC;gBACd,CAAC;gBACD,OAAO,KAAK,CAAC;YACf,CAAC,CAAC;YAEF,uCAAuC;YACvC,IAAI,gBAAgB,EAAE,CAAC;gBACrB,gBAAgB,CAAC,SAAS,GAAG,CAAC,KAAmB,EAAE,EAAE;oBACnD,kBAAkB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBACjC,CAAC,CAAC;YACJ,CAAC;YAED,MAAM,cAAc,GAAG,CAAC,KAAmB,EAAE,EAAE;gBAC7C,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC;oBAC5C,OAAO;gBACT,CAAC;gBACD,kBAAkB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACjC,CAAC,CAAC;YAEF,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;YAEnD,MAAM,aAAa,GAAG,MAAM,CAAC,UAAU,CAAC,GAAG,EAAE;gBAC3C,OAAO,CAAC,cAAc,EAAE,aAAa,EAAE,mBAAmB,CAAC,CAAC;gBAC5D,IAAI,CAAC;oBACH,KAAK,CAAC,KAAK,EAAE,CAAC;gBAChB,CAAC;gBAAC,WAAM,CAAC;oBACP,0CAA0C;gBAC5C,CAAC;gBACD,MAAM,CAAC,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC,CAAC;YAC/C,CAAC,EAAE,MAAM,CAAC,CAAC;YAEX,MAAM,mBAAmB,GAAG,MAAM,CAAC,WAAW,CAAC,GAAG,EAAE;gBAClD,IAAI,CAAC;oBACH,mFAAmF;oBACnF,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;wBACjB,OAAO,CAAC,cAAc,EAAE,aAAa,EAAE,mBAAmB,CAAC,CAAC;wBAC5D,MAAM,CAAC,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC,CAAC;oBACvD,CAAC;gBACH,CAAC;gBAAC,WAAM,CAAC;oBACP,8EAA8E;oBAC9E,2EAA2E;oBAC3E,2EAA2E;oBAC3E,qEAAqE;oBACrE,aAAa,CAAC,mBAAmB,CAAC,CAAC;oBACnC,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;wBACvB,OAAO,CAAC,GAAG,CACT,WAAW,UAAU,gEAAgE;4BACnF,0CAA0C,CAC7C,CAAC;oBACJ,CAAC;gBACH,CAAC;YACH,CAAC,EAAE,IAAI,CAAC,CAAC;QACX,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,UAAkB;QAC7B,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC9C,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC,CAAC;QAEvD,8CAA8C;QAC9C,IAAI,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,SAAS,EAAE,CAAC;YACtB,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,UAAkB;QACjC,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;QAChD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;QAC/B,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC9C,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,YAAY,CAAC,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC,CAAC;QACzD,CAAC;QACD,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;IACjC,CAAC;IAED,KAAK,CAAC,oBAAoB,CAAC,UAAkB;QAC3C,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;QAChD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,sDAAsD,UAAU,IAAI,CAAC,CAAC;QACxF,CAAC;QACD,OAAO;YACL,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,GAAG,EAAE,MAAM,CAAC,OAAO;SACpB,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,UAAkB;QAC9B,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;QAChD,IAAI,CAAC,CAAA,MAAM,aAAN,MAAM,uBAAN,MAAM,CAAE,YAAY,CAAA,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CACb,sDAAsD,UAAU,iDAAiD,CAClH,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;QAC5C,IAAI,CAAC,MAAM,CAAC,mBAAmB,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CAAC,mDAAmD,UAAU,IAAI,CAAC,CAAC;QACrF,CAAC;QAED,MAAM,IAAI,CAAC,uBAAuB,CAAC,UAAU,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC;IACtE,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,GAAQ,EAAE,aAAsB;;QACxD,4CAA4C;QAC5C,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC/C,MAAM,UAAU,GAAG,IAAI,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAE1D,wDAAwD;QACxD,UAAU,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YAChC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACzB,CAAC,CAAC,CAAC;QAEH,MAAM,YAAY,GAAG,aAAa,aAAb,aAAa,cAAb,aAAa,GAAI,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC1D,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,mBAAmB,CAAC,YAAY,CAAC,CAAC;QACvD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,YAAY,CAAC,UAAU,CAAC,eAAe,CAAC,eAAe,CAAC,CAAC;YACzD,OAAO,EAAE,KAAK,EAAE,iDAAiD,EAAE,CAAC;QACtE,CAAC;QAED,MAAM,EAAE,UAAU,EAAE,GAAG,OAAO,CAAC;QAC/B,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC9C,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,YAAY,CAAC,UAAU,CAAC,eAAe,CAAC,eAAe,CAAC,CAAC;YACzD,OAAO,EAAE,KAAK,EAAE,oBAAoB,UAAU,4BAA4B,EAAE,CAAC;QAC/E,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAClC,IAAI,KAAK,EAAE,CAAC;YACV,YAAY,CAAC,UAAU,CAAC,eAAe,CAAC,eAAe,CAAC,CAAC;YACzD,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,KAAK,EAAE,CAAC;QAC7D,CAAC;QAED,IAAI,CAAC;YACH,IAAI,aAAkC,CAAC;YAEvC,sBAAsB;YACtB,IAAI,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;gBACvB,0BAA0B;gBAC1B,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;gBAChC,IAAI,CAAC,IAAI,EAAE,CAAC;oBACV,YAAY,CAAC,UAAU,CAAC,eAAe,CAAC,eAAe,CAAC,CAAC;oBACzD,OAAO,EAAE,KAAK,EAAE,kDAAkD,EAAE,CAAC;gBACvE,CAAC;gBACD,aAAa,GAAG,MAAM,IAAI,CAAC,yBAAyB,CAAC,UAAU,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;YAClF,CAAC;iBAAM,IAAI,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,CAAC;gBACtC,gBAAgB;gBAChB,aAAa,GAAG;oBACd,YAAY,EAAE,MAAM,CAAC,GAAG,CAAC,cAAc,CAAE;oBACzC,UAAU,EAAE,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,QAAQ;oBAChD,UAAU,EAAE,MAAM,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,YAAY,CAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS;oBAC1F,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,SAAS;oBACvC,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,SAAS;iBAC9C,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,YAAY,CAAC,UAAU,CAAC,eAAe,CAAC,eAAe,CAAC,CAAC;gBACzD,OAAO,EAAE,KAAK,EAAE,oDAAoD,EAAE,CAAC;YACzE,CAAC;YAED,MAAM,SAAS,GAAG,aAAa,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,aAAa,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC;YACjH,MAAM,UAAU,GAAG,MAAA,MAAA,aAAa,CAAC,KAAK,0CAAE,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,OAAO,CAAC,mCAAI,EAAE,CAAC;YAEzE,oCAAoC;YACpC,IAAI,YAAY,GAAmC,IAAI,CAAC;YACxD,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;gBACvB,YAAY,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,UAAU,EAAE,aAAa,CAAC,YAAY,CAAC,CAAC;YAClF,CAAC;YAED,IAAI,CAAC,aAAa,CAAC,UAAU,EAAE;gBAC7B,WAAW,EAAE,aAAa,CAAC,YAAY;gBACvC,YAAY,EAAE,aAAa,CAAC,aAAa;gBACzC,OAAO,EAAE,aAAa,CAAC,QAAQ;gBAC/B,SAAS;gBACT,KAAK,EAAE,UAAU;gBACjB,SAAS,EAAE,aAAa,CAAC,UAAU;aACpC,CAAC,CAAC;YAEH,OAAO;gBACL,QAAQ,EAAE,QAAQ;gBAClB,MAAM,EAAE;oBACN,UAAU;oBACV,WAAW,EAAE;wBACX,KAAK,EAAE,aAAa,CAAC,YAAY;wBACjC,SAAS,EAAE,aAAa,CAAC,UAAU;wBACnC,OAAO,EAAE,IAAI,IAAI,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE;wBAC1C,YAAY,EAAE,aAAa,CAAC,aAAa;qBAC1C;oBACD,OAAO,EAAE,MAAA,aAAa,CAAC,QAAQ,mCAAI,IAAI;oBACvC,YAAY,EAAE,MAAA,aAAa,CAAC,aAAa,mCAAI,IAAI;oBACjD,YAAY;oBACZ,KAAK,EAAE,UAAU;oBACjB,SAAS,EAAE,aAAa,CAAC,UAAU;oBACnC,SAAS,EAAE,MAAA,aAAa,CAAC,UAAU,mCAAI,IAAI;iBAC5C;aACF,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,KAAK,EAAE,CAAC;gBACzB,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC;YAChC,CAAC;YACD,OAAO,EAAE,KAAK,EAAE,mCAAmC,EAAE,CAAC;QACxD,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,UAAU,CAAC,eAAe,CAAC,eAAe,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,yBAAyB,CACrC,UAAkB,EAClB,IAAY,EACZ,OAA2B;QAE3B,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;QAC5C,IAAI,CAAC,MAAM,CAAC,mBAAmB,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CAAC,mDAAmD,UAAU,IAAI,CAAC,CAAC;QACrF,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;YACjC,UAAU,EAAE,oBAAoB;YAChC,SAAS,EAAE,MAAM,CAAC,KAAK;YACvB,IAAI;YACJ,YAAY,EAAE,OAAO,CAAC,WAAW;SAClC,CAAC,CAAC;QAEH,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;YACvB,MAAM,CAAC,GAAG,CAAC,eAAe,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;QACpD,CAAC;QAED,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;YACvB,OAAO,CAAC,GAAG,CAAC,WAAW,UAAU,uBAAuB,EAAE,MAAM,CAAC,mBAAmB,CAAC,CAAC;QACxF,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,mBAAmB,EAAE;YACvD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,mCAAmC;aACpD;YACD,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE;SACxB,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,iCAAiC,QAAQ,CAAC,MAAM,MAAM,IAAI,EAAE,CAAC,CAAC;QAChF,CAAC;QAED,OAAO,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAwB,CAAC;IACxD,CAAC;IAEO,KAAK,CAAC,uBAAuB,CAAC,UAAkB,EAAE,YAAoB;;QAC5E,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;QAC5C,IAAI,CAAC,MAAM,CAAC,mBAAmB,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CAAC,mDAAmD,UAAU,IAAI,CAAC,CAAC;QACrF,CAAC;QAED,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;YACjC,UAAU,EAAE,eAAe;YAC3B,aAAa,EAAE,YAAY;YAC3B,SAAS,EAAE,MAAM,CAAC,KAAK;SACxB,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,mBAAmB,EAAE;YACvD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,mCAAmC;aACpD;YACD,IAAI,EAAE,MAAM,CAAC,QAAQ,EAAE;SACxB,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,0BAA0B,QAAQ,CAAC,MAAM,MAAM,IAAI,EAAE,CAAC,CAAC;QACzE,CAAC;QAED,MAAM,MAAM,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAwB,CAAC;QAC9D,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC;QACnG,MAAM,UAAU,GAAG,MAAA,MAAA,MAAM,CAAC,KAAK,0CAAE,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,OAAO,CAAC,mCAAI,EAAE,CAAC;QAElE,IAAI,CAAC,aAAa,CAAC,UAAU,EAAE;YAC7B,WAAW,EAAE,MAAM,CAAC,YAAY;YAChC,YAAY,EAAE,MAAA,MAAM,CAAC,aAAa,mCAAI,YAAY;YAClD,OAAO,EAAE,MAAM,CAAC,QAAQ;YACxB,SAAS;YACT,KAAK,EAAE,UAAU;YACjB,SAAS,EAAE,MAAM,CAAC,UAAU;SAC7B,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,aAAa,CAAC,UAAkB,EAAE,WAAmB;QACjE,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;QAC5C,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,2CAA2C,UAAU,IAAI,CAAC,CAAC;QAC7E,CAAC;QAED,MAAM,OAAO,GAA2B;YACtC,aAAa,EAAE,UAAU,WAAW,EAAE;SACvC,CAAC;QAEF,IAAI,MAAM,CAAC,yBAAyB,EAAE,CAAC;YACrC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,yBAAyB,CAAC,CAAC;QAC3D,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,WAAW,EAAE;YAC/C,OAAO;SACR,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;YACnC,MAAM,IAAI,KAAK,CAAC,oCAAoC,QAAQ,CAAC,MAAM,MAAM,IAAI,EAAE,CAAC,CAAC;QACnF,CAAC;QAED,OAAO,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA4B,CAAC;IAC5D,CAAC;IAEO,aAAa,CAAC,UAAkB,EAAE,MAA0B;QAClE,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;IAC9E,CAAC;IAEO,eAAe,CAAC,UAAkB;QACxC,MAAM,GAAG,GAAG,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC,CAAC;QAChE,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAuB,CAAC;QAC/C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CAAC,sDAAsD,UAAU,GAAG,EAAE,GAAG,CAAC,CAAC;YACvF,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAEO,mBAAmB,CAAC,KAAa,EAAE,OAA2B;QACpE,YAAY,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,YAAY,GAAG,KAAK,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IAChF,CAAC;IAEO,mBAAmB,CAAC,KAAa;QACvC,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,YAAY,GAAG,KAAK,EAAE,CAAC;QAC3C,MAAM,GAAG,GAAG,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACtC,YAAY,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAuB,CAAC;QAC/C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CAAC,8CAA8C,EAAE,GAAG,CAAC,CAAC;YAClE,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAEO,aAAa;QACnB,OAAO,CAAC,GAAG,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC9G,CAAC;IAEO,oBAAoB;QAC1B,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;QACjC,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QAC9B,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC;aACrB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,oEAAoE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;aACxF,IAAI,CAAC,EAAE,CAAC,CAAC;IACd,CAAC;IAEO,KAAK,CAAC,qBAAqB,CAAC,YAAoB;QACtD,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;QAClC,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QAC1C,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAC3D,OAAO,IAAI,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;IACtD,CAAC;IAEO,eAAe,CAAC,MAAkB;QACxC,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,IAAI,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1D,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACjF,CAAC;CACF","sourcesContent":["import { BaseSocialLogin } from './base';\nimport type {\n  AuthorizationCode,\n  LoginResult,\n  OAuth2LoginOptions,\n  OAuth2LoginResponse,\n  OAuth2ProviderConfig,\n  ProviderResponseMap,\n} from './definitions';\n\ninterface OAuth2TokenResponse {\n  token_type: string;\n  expires_in?: number;\n  access_token: string;\n  scope?: string;\n  refresh_token?: string;\n  id_token?: string;\n}\n\ninterface OAuth2PendingLogin {\n  providerId: string;\n  codeVerifier: string;\n  redirectUri: string;\n  scope: string;\n}\n\ninterface OAuth2StoredTokens {\n  accessToken: string;\n  refreshToken?: string;\n  idToken?: string;\n  expiresAt: number;\n  scope: string[];\n  tokenType: string;\n}\n\ninterface OAuth2ConfigInternal extends OAuth2ProviderConfig {\n  responseType: 'code' | 'token';\n  pkceEnabled: boolean;\n  scope: string;\n  logsEnabled: boolean;\n}\n\n/**\n * OAuth2 Social Login Manager\n * Supports multiple OAuth2 provider configurations\n */\nexport class OAuth2SocialLogin extends BaseSocialLogin {\n  private providers: Map<string, OAuth2ConfigInternal> = new Map();\n  private readonly TOKENS_KEY_PREFIX = 'capgo_social_login_oauth2_tokens_';\n  private readonly STATE_PREFIX = 'capgo_social_login_oauth2_state_';\n\n  /**\n   * Initialize multiple OAuth2 providers\n   */\n  async initializeProviders(configs: Record<string, OAuth2ProviderConfig>): Promise<void> {\n    for (const [providerId, config] of Object.entries(configs)) {\n      if (!config.appId || !config.authorizationBaseUrl || !config.redirectUrl) {\n        throw new Error(`OAuth2 provider '${providerId}' requires appId, authorizationBaseUrl, and redirectUrl`);\n      }\n\n      const internalConfig: OAuth2ConfigInternal = {\n        ...config,\n        responseType: config.responseType ?? 'code',\n        pkceEnabled: config.pkceEnabled ?? true,\n        scope: config.scope ?? '',\n        logsEnabled: config.logsEnabled ?? false,\n      };\n\n      this.providers.set(providerId, internalConfig);\n\n      if (internalConfig.logsEnabled) {\n        console.log(`[OAuth2:${providerId}] Initialized with config:`, {\n          appId: config.appId,\n          authorizationBaseUrl: config.authorizationBaseUrl,\n          redirectUrl: config.redirectUrl,\n          responseType: internalConfig.responseType,\n          pkceEnabled: internalConfig.pkceEnabled,\n        });\n      }\n    }\n  }\n\n  private getProvider(providerId: string): OAuth2ConfigInternal {\n    const config = this.providers.get(providerId);\n    if (!config) {\n      throw new Error(`OAuth2 provider '${providerId}' not configured. Call initialize() first.`);\n    }\n    return config;\n  }\n\n  private getTokensKey(providerId: string): string {\n    return `${this.TOKENS_KEY_PREFIX}${providerId}`;\n  }\n\n  async login<T extends 'oauth2'>(\n    options: OAuth2LoginOptions,\n  ): Promise<{ provider: T; result: ProviderResponseMap[T] }> {\n    const { providerId } = options;\n    const config = this.getProvider(providerId);\n\n    const redirectUri = options.redirectUrl ?? config.redirectUrl;\n    const scope = options.scope ?? config.scope;\n    const state = options.state ?? this.generateState();\n    const codeVerifier = options.codeVerifier ?? this.generateCodeVerifier();\n\n    // Build authorization URL\n    const params = new URLSearchParams({\n      response_type: config.responseType,\n      client_id: config.appId,\n      redirect_uri: redirectUri,\n      state,\n    });\n\n    if (scope) {\n      params.set('scope', scope);\n    }\n\n    // Add PKCE for code flow\n    if (config.responseType === 'code' && config.pkceEnabled) {\n      const codeChallenge = await this.generateCodeChallenge(codeVerifier);\n      params.set('code_challenge', codeChallenge);\n      params.set('code_challenge_method', 'S256');\n    }\n\n    // Add additional parameters from config\n    if (config.additionalParameters) {\n      for (const [key, value] of Object.entries(config.additionalParameters)) {\n        params.set(key, value);\n      }\n    }\n\n    // Add additional parameters from login options\n    if (options.additionalParameters) {\n      for (const [key, value] of Object.entries(options.additionalParameters)) {\n        params.set(key, value);\n      }\n    }\n\n    // Store pending login state\n    this.persistPendingLogin(state, {\n      providerId,\n      codeVerifier,\n      redirectUri,\n      scope,\n    });\n\n    localStorage.setItem(BaseSocialLogin.OAUTH_STATE_KEY, JSON.stringify({ provider: 'oauth2', providerId, state }));\n\n    const authUrl = `${config.authorizationBaseUrl}?${params.toString()}`;\n\n    if (config.logsEnabled) {\n      console.log(`[OAuth2:${providerId}] Opening authorization URL:`, authUrl);\n    }\n\n    // Open popup window\n    const width = 500;\n    const height = 650;\n    const left = window.screenX + (window.outerWidth - width) / 2;\n    const top = window.screenY + (window.outerHeight - height) / 2;\n\n    const popup = window.open(\n      authUrl,\n      'OAuth2Login',\n      `width=${width},height=${height},left=${left},top=${top},popup=1`,\n    );\n\n    return new Promise((resolve, reject) => {\n      if (!popup) {\n        reject(new Error('Unable to open login window. Please allow popups.'));\n        return;\n      }\n\n      // Use BroadcastChannel for cross-origin communication (works when postMessage doesn't)\n      const channelName = `oauth2_${state}`;\n      let broadcastChannel: BroadcastChannel | null = null;\n\n      try {\n        broadcastChannel = new BroadcastChannel(channelName);\n      } catch {\n        // BroadcastChannel not supported, fall back to postMessage only\n        if (config.logsEnabled) {\n          console.log(`[OAuth2:${providerId}] BroadcastChannel not supported, using postMessage only`);\n        }\n      }\n\n      const cleanup = (\n        messageHandler: (event: MessageEvent) => void,\n        timeoutHandle: number,\n        intervalHandle: number,\n      ) => {\n        window.removeEventListener('message', messageHandler);\n        clearTimeout(timeoutHandle);\n        clearInterval(intervalHandle);\n        if (broadcastChannel) {\n          broadcastChannel.close();\n        }\n      };\n\n      const handleOAuthMessage = (data: Record<string, unknown>) => {\n        if (data?.type === 'oauth-response') {\n          if (data?.provider && data.provider !== 'oauth2') {\n            return false;\n          }\n          // Check providerId matches if present\n          if (data?.providerId && data.providerId !== providerId) {\n            return false;\n          }\n          cleanup(messageHandler, timeoutHandle, popupClosedInterval);\n          // eslint-disable-next-line @typescript-eslint/no-unused-vars\n          const {\n            provider: _ignoredProvider,\n            type: _ignoredType,\n            ...payload\n          } = data as unknown as OAuth2LoginResponse & {\n            provider?: string;\n            type?: string;\n          };\n          resolve({\n            provider: 'oauth2' as T,\n            result: payload as ProviderResponseMap[T],\n          } as { provider: T; result: ProviderResponseMap[T] });\n          return true;\n        } else if (data?.type === 'oauth-error') {\n          if (data?.provider && data.provider !== 'oauth2') {\n            return false;\n          }\n          cleanup(messageHandler, timeoutHandle, popupClosedInterval);\n          reject(new Error((data.error as string) || 'OAuth2 login was cancelled.'));\n          return true;\n        }\n        return false;\n      };\n\n      // Listen for BroadcastChannel messages\n      if (broadcastChannel) {\n        broadcastChannel.onmessage = (event: MessageEvent) => {\n          handleOAuthMessage(event.data);\n        };\n      }\n\n      const messageHandler = (event: MessageEvent) => {\n        if (event.origin !== window.location.origin) {\n          return;\n        }\n        handleOAuthMessage(event.data);\n      };\n\n      window.addEventListener('message', messageHandler);\n\n      const timeoutHandle = window.setTimeout(() => {\n        cleanup(messageHandler, timeoutHandle, popupClosedInterval);\n        try {\n          popup.close();\n        } catch {\n          // Ignore cross-origin errors when closing\n        }\n        reject(new Error('OAuth2 login timed out.'));\n      }, 300000);\n\n      const popupClosedInterval = window.setInterval(() => {\n        try {\n          // Check if popup is closed - this may throw cross-origin errors for some providers\n          if (popup.closed) {\n            cleanup(messageHandler, timeoutHandle, popupClosedInterval);\n            reject(new Error('OAuth2 login window was closed.'));\n          }\n        } catch {\n          // Cross-origin error when checking popup.closed - this happens when the popup\n          // navigates to a third-party OAuth provider with strict security settings.\n          // We can't detect if the window was closed, so we just rely on the timeout\n          // and message handlers. Clear the interval to avoid repeated errors.\n          clearInterval(popupClosedInterval);\n          if (config.logsEnabled) {\n            console.log(\n              `[OAuth2:${providerId}] Cannot check popup.closed due to cross-origin restrictions. ` +\n                'Relying on message handlers and timeout.',\n            );\n          }\n        }\n      }, 1000);\n    });\n  }\n\n  async logout(providerId: string): Promise<void> {\n    const config = this.providers.get(providerId);\n    localStorage.removeItem(this.getTokensKey(providerId));\n\n    // If logout URL is configured, redirect to it\n    if (config?.logoutUrl) {\n      window.open(config.logoutUrl, '_blank');\n    }\n  }\n\n  async isLoggedIn(providerId: string): Promise<{ isLoggedIn: boolean }> {\n    const tokens = this.getStoredTokens(providerId);\n    if (!tokens) {\n      return { isLoggedIn: false };\n    }\n    const isValid = tokens.expiresAt > Date.now();\n    if (!isValid) {\n      localStorage.removeItem(this.getTokensKey(providerId));\n    }\n    return { isLoggedIn: isValid };\n  }\n\n  async getAuthorizationCode(providerId: string): Promise<AuthorizationCode> {\n    const tokens = this.getStoredTokens(providerId);\n    if (!tokens) {\n      throw new Error(`OAuth2 access token is not available for provider '${providerId}'.`);\n    }\n    return {\n      accessToken: tokens.accessToken,\n      jwt: tokens.idToken,\n    };\n  }\n\n  async refresh(providerId: string): Promise<void> {\n    const tokens = this.getStoredTokens(providerId);\n    if (!tokens?.refreshToken) {\n      throw new Error(\n        `No OAuth2 refresh token is available for provider '${providerId}'. Include offline_access scope to receive one.`,\n      );\n    }\n\n    const config = this.getProvider(providerId);\n    if (!config.accessTokenEndpoint) {\n      throw new Error(`No accessTokenEndpoint configured for provider '${providerId}'.`);\n    }\n\n    await this.refreshWithRefreshToken(providerId, tokens.refreshToken);\n  }\n\n  async handleOAuthRedirect(url: URL, expectedState?: string): Promise<LoginResult | { error: string } | null> {\n    // Check both query params and hash fragment\n    const params = new URLSearchParams(url.search);\n    const hashParams = new URLSearchParams(url.hash.slice(1));\n\n    // Merge params, hash takes priority (for implicit flow)\n    hashParams.forEach((value, key) => {\n      params.set(key, value);\n    });\n\n    const stateFromUrl = expectedState ?? params.get('state');\n    if (!stateFromUrl) {\n      return null;\n    }\n\n    const pending = this.consumePendingLogin(stateFromUrl);\n    if (!pending) {\n      localStorage.removeItem(BaseSocialLogin.OAUTH_STATE_KEY);\n      return { error: 'OAuth2 login session expired or state mismatch.' };\n    }\n\n    const { providerId } = pending;\n    const config = this.providers.get(providerId);\n    if (!config) {\n      localStorage.removeItem(BaseSocialLogin.OAUTH_STATE_KEY);\n      return { error: `OAuth2 provider '${providerId}' configuration not found.` };\n    }\n\n    const error = params.get('error');\n    if (error) {\n      localStorage.removeItem(BaseSocialLogin.OAUTH_STATE_KEY);\n      return { error: params.get('error_description') || error };\n    }\n\n    try {\n      let tokenResponse: OAuth2TokenResponse;\n\n      // Check response type\n      if (params.has('code')) {\n        // Authorization code flow\n        const code = params.get('code');\n        if (!code) {\n          localStorage.removeItem(BaseSocialLogin.OAUTH_STATE_KEY);\n          return { error: 'OAuth2 authorization code missing from redirect.' };\n        }\n        tokenResponse = await this.exchangeAuthorizationCode(providerId, code, pending);\n      } else if (params.has('access_token')) {\n        // Implicit flow\n        tokenResponse = {\n          access_token: params.get('access_token')!,\n          token_type: params.get('token_type') || 'bearer',\n          expires_in: params.has('expires_in') ? parseInt(params.get('expires_in')!, 10) : undefined,\n          scope: params.get('scope') || undefined,\n          id_token: params.get('id_token') || undefined,\n        };\n      } else {\n        localStorage.removeItem(BaseSocialLogin.OAUTH_STATE_KEY);\n        return { error: 'No authorization code or access token in redirect.' };\n      }\n\n      const expiresAt = tokenResponse.expires_in ? Date.now() + tokenResponse.expires_in * 1000 : Date.now() + 3600000;\n      const scopeArray = tokenResponse.scope?.split(' ').filter(Boolean) ?? [];\n\n      // Fetch resource data if configured\n      let resourceData: Record<string, unknown> | null = null;\n      if (config.resourceUrl) {\n        resourceData = await this.fetchResource(providerId, tokenResponse.access_token);\n      }\n\n      this.persistTokens(providerId, {\n        accessToken: tokenResponse.access_token,\n        refreshToken: tokenResponse.refresh_token,\n        idToken: tokenResponse.id_token,\n        expiresAt,\n        scope: scopeArray,\n        tokenType: tokenResponse.token_type,\n      });\n\n      return {\n        provider: 'oauth2',\n        result: {\n          providerId,\n          accessToken: {\n            token: tokenResponse.access_token,\n            tokenType: tokenResponse.token_type,\n            expires: new Date(expiresAt).toISOString(),\n            refreshToken: tokenResponse.refresh_token,\n          },\n          idToken: tokenResponse.id_token ?? null,\n          refreshToken: tokenResponse.refresh_token ?? null,\n          resourceData,\n          scope: scopeArray,\n          tokenType: tokenResponse.token_type,\n          expiresIn: tokenResponse.expires_in ?? null,\n        },\n      };\n    } catch (err) {\n      if (err instanceof Error) {\n        return { error: err.message };\n      }\n      return { error: 'OAuth2 login failed unexpectedly.' };\n    } finally {\n      localStorage.removeItem(BaseSocialLogin.OAUTH_STATE_KEY);\n    }\n  }\n\n  private async exchangeAuthorizationCode(\n    providerId: string,\n    code: string,\n    pending: OAuth2PendingLogin,\n  ): Promise<OAuth2TokenResponse> {\n    const config = this.getProvider(providerId);\n    if (!config.accessTokenEndpoint) {\n      throw new Error(`No accessTokenEndpoint configured for provider '${providerId}'.`);\n    }\n\n    const params = new URLSearchParams({\n      grant_type: 'authorization_code',\n      client_id: config.appId,\n      code,\n      redirect_uri: pending.redirectUri,\n    });\n\n    if (config.pkceEnabled) {\n      params.set('code_verifier', pending.codeVerifier);\n    }\n\n    if (config.logsEnabled) {\n      console.log(`[OAuth2:${providerId}] Exchanging code at:`, config.accessTokenEndpoint);\n    }\n\n    const response = await fetch(config.accessTokenEndpoint, {\n      method: 'POST',\n      headers: {\n        'Content-Type': 'application/x-www-form-urlencoded',\n      },\n      body: params.toString(),\n    });\n\n    if (!response.ok) {\n      const text = await response.text();\n      throw new Error(`OAuth2 token exchange failed (${response.status}): ${text}`);\n    }\n\n    return (await response.json()) as OAuth2TokenResponse;\n  }\n\n  private async refreshWithRefreshToken(providerId: string, refreshToken: string): Promise<void> {\n    const config = this.getProvider(providerId);\n    if (!config.accessTokenEndpoint) {\n      throw new Error(`No accessTokenEndpoint configured for provider '${providerId}'.`);\n    }\n\n    const params = new URLSearchParams({\n      grant_type: 'refresh_token',\n      refresh_token: refreshToken,\n      client_id: config.appId,\n    });\n\n    const response = await fetch(config.accessTokenEndpoint, {\n      method: 'POST',\n      headers: {\n        'Content-Type': 'application/x-www-form-urlencoded',\n      },\n      body: params.toString(),\n    });\n\n    if (!response.ok) {\n      const text = await response.text();\n      throw new Error(`OAuth2 refresh failed (${response.status}): ${text}`);\n    }\n\n    const tokens = (await response.json()) as OAuth2TokenResponse;\n    const expiresAt = tokens.expires_in ? Date.now() + tokens.expires_in * 1000 : Date.now() + 3600000;\n    const scopeArray = tokens.scope?.split(' ').filter(Boolean) ?? [];\n\n    this.persistTokens(providerId, {\n      accessToken: tokens.access_token,\n      refreshToken: tokens.refresh_token ?? refreshToken,\n      idToken: tokens.id_token,\n      expiresAt,\n      scope: scopeArray,\n      tokenType: tokens.token_type,\n    });\n  }\n\n  private async fetchResource(providerId: string, accessToken: string): Promise<Record<string, unknown>> {\n    const config = this.getProvider(providerId);\n    if (!config.resourceUrl) {\n      throw new Error(`No resourceUrl configured for provider '${providerId}'.`);\n    }\n\n    const headers: Record<string, string> = {\n      Authorization: `Bearer ${accessToken}`,\n    };\n\n    if (config.additionalResourceHeaders) {\n      Object.assign(headers, config.additionalResourceHeaders);\n    }\n\n    const response = await fetch(config.resourceUrl, {\n      headers,\n    });\n\n    if (!response.ok) {\n      const text = await response.text();\n      throw new Error(`Unable to fetch OAuth2 resource (${response.status}): ${text}`);\n    }\n\n    return (await response.json()) as Record<string, unknown>;\n  }\n\n  private persistTokens(providerId: string, tokens: OAuth2StoredTokens): void {\n    localStorage.setItem(this.getTokensKey(providerId), JSON.stringify(tokens));\n  }\n\n  private getStoredTokens(providerId: string): OAuth2StoredTokens | null {\n    const raw = localStorage.getItem(this.getTokensKey(providerId));\n    if (!raw) {\n      return null;\n    }\n    try {\n      return JSON.parse(raw) as OAuth2StoredTokens;\n    } catch (err) {\n      console.warn(`Failed to parse stored OAuth2 tokens for provider '${providerId}'`, err);\n      return null;\n    }\n  }\n\n  private persistPendingLogin(state: string, payload: OAuth2PendingLogin): void {\n    localStorage.setItem(`${this.STATE_PREFIX}${state}`, JSON.stringify(payload));\n  }\n\n  private consumePendingLogin(state: string): OAuth2PendingLogin | null {\n    const key = `${this.STATE_PREFIX}${state}`;\n    const raw = localStorage.getItem(key);\n    localStorage.removeItem(key);\n    if (!raw) {\n      return null;\n    }\n    try {\n      return JSON.parse(raw) as OAuth2PendingLogin;\n    } catch (err) {\n      console.warn('Failed to parse pending OAuth2 login payload', err);\n      return null;\n    }\n  }\n\n  private generateState(): string {\n    return [...crypto.getRandomValues(new Uint8Array(16))].map((b) => b.toString(16).padStart(2, '0')).join('');\n  }\n\n  private generateCodeVerifier(): string {\n    const array = new Uint8Array(64);\n    crypto.getRandomValues(array);\n    return Array.from(array)\n      .map((b) => 'abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789-._~'[b % 66])\n      .join('');\n  }\n\n  private async generateCodeChallenge(codeVerifier: string): Promise<string> {\n    const encoder = new TextEncoder();\n    const data = encoder.encode(codeVerifier);\n    const digest = await crypto.subtle.digest('SHA-256', data);\n    return this.base64UrlEncode(new Uint8Array(digest));\n  }\n\n  private base64UrlEncode(buffer: Uint8Array): string {\n    let binary = '';\n    buffer.forEach((b) => (binary += String.fromCharCode(b)));\n    return btoa(binary).replace(/\\+/g, '-').replace(/\\//g, '_').replace(/=+$/, '');\n  }\n}\n"]}